Vulnerability-Lookup

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

Full-Text Search

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

BDU:2015-01134 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2024-07-05 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета glibc-doc операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "27.03.2008",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "05.07.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01134",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 glibc-doc \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01135 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета glibc-source операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01135",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 glibc-source \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01136 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01136",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01137 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6.1 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01137",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6.1 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01138 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6.1-alphaev67 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01138",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6.1-alphaev67 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01139 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6.1-dbg операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01139",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6.1-dbg \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01140 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6.1-dev операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01140",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6.1-dev \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01141 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6.1-pic операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-189 - Ошибки, возникающие при обработке чисел

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01141",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0447\u0438\u0441\u0435\u043b (CWE-189)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6.1-pic \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-189",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01142 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6.1-prof операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-189 - Ошибки, возникающие при обработке чисел

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01142",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0447\u0438\u0441\u0435\u043b (CWE-189)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6.1-prof \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-189",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01143 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6.1-udeb операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01143",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6.1-udeb \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01144 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-amd64 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01144",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-amd64 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01145 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dbg операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01145",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dbg \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01146 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dev операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01146",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dev \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01147 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dev-amd64 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01147",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dev-amd64 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01148 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dev-i386 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01148",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dev-i386 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01149 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dev-mips64 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01149",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dev-mips64 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01150 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dev-mipsn32 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01150",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dev-mipsn32 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01151 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dev-ppc64 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01151",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dev-ppc64 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01152 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dev-s390x операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01152",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dev-s390x \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01153 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dev-sparc64 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01153",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dev-sparc64 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01154 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-i386 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01154",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-i386 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01155 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-i686 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01155",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-i686 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01156 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-mips64 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-189 - Ошибки, возникающие при обработке чисел

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01156",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0447\u0438\u0441\u0435\u043b (CWE-189)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-mips64 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-189",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01157 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-mipsn32 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01157",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-mipsn32 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01158 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-pic операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01158",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-pic \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01159 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-ppc64 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-189 - Ошибки, возникающие при обработке чисел

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01159",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0447\u0438\u0441\u0435\u043b (CWE-189)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-ppc64 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-189",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01160 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-prof операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01160",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-prof \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01161 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-s390x операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-189 - Ошибки, возникающие при обработке чисел

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01161",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0447\u0438\u0441\u0435\u043b (CWE-189)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-s390x \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-189",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01162 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-sparc64 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-189 - Ошибки, возникающие при обработке чисел

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01162",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0447\u0438\u0441\u0435\u043b (CWE-189)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-sparc64 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-189",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01163 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-sparcv9b операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01163",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-sparcv9b \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01164 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-udeb операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01164",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-udeb \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01165 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-xen операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01165",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-xen \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01166 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libnss-dns-udeb операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01166",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libnss-dns-udeb \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01167 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libnss-files-udeb операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01167",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libnss-files-udeb \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01168 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета locales операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01168",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 locales \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01169 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета locales-all операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01169",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 locales-all \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01170 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета nscd операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01170",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 nscd \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2017-00284 (CVE-2010-0830)

Vulnerability from fstec – Published: 2017-02-13 – Updated: 2024-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимость библиотеки, обеспечивающей системные вызовы и основные функции, glibc, позволяющая нарушителю выполнить произвольный код

Summary

Уязвимость функции elf_get_dynamic_info (elf/dynamic-link.h) модуля ld.so библиотеки, обеспечивающей системные вызовы и основные функции, glibc связана с целочисленным переполнением. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код с помощью специально сформированной ELF-программы, содержащей отрицательное значение для определенного элемента структуры d_tag в ELF-заголовке

Severity

5.1 (Medium) CVSS 2.0


                      
                        AV:N/AC:H/Au:N/C:P/I:P/A:P

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Being clarified

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-189 - Ошибки, возникающие при обработке чисел

Aliases

CVE-2010-0830, USN-944-1, MANDRIVA, ID:, MDVSA-2010:111, MDVSA-2010:112, DSA-2058, GLSA-201011-01, 2010:052, SECURITY, TRACKER, ID:1024044, BID, ID:40063

References

13 references

URL
http://drosenbe.blogspot.com/2010/05/integer-overflow-in-ldso-cve-2010-0830.html
http://frugalware.org/security/662
http://security.gentoo.org/glsa/glsa-201011-01.xml
http://securitytracker.com/id?1024044
http://sourceware.org/git/?p=glibc.git;a=commit;h=db07e962b6ea963dbb345439f6ab9…
http://www.debian.org/security/2010/dsa-2058
http://www.mandriva.com/security/advisories?name=MDVSA-2010:111
http://www.mandriva.com/security/advisories?name=MDVSA-2010:112
http://www.securityfocus.com/bid/40063
http://www.ubuntu.com/usn/USN-944-1
http://www.vupen.com/english/advisories/2010/1246
http://xforce.iss.net/xforce/xfdb/58915
https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html

Impacted products

2 products from 3 vendors

Vendors

Huawei Technologies Co., Ltd., The GNU Project

Products

USG6330, glibc

Versions

V100R001C30SPC600 (USG6330), от 2.0.1 до 2.11.1 включительно (glibc)

Product types

ПО программно-аппаратных средств защиты, Application software

Platforms

Сообщество свободного программного обеспечения Unix ., Сообщество свободного программного обеспечения Linux .

Mitigations

Использование рекомендаций: Обновление библиотеки до актуальной версии Обновление программного обеспечения USG6330 до версии V500R005C20SPC500 и выше

Credits

-

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Huawei Technologies Co., Ltd., The GNU Project",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "V100R001C30SPC600 (USG6330), \u043e\u0442 2.0.1 \u0434\u043e 2.11.1 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (glibc)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0434\u043e \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f USG6330 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 V500R005C20SPC500 \u0438 \u0432\u044b\u0448\u0435",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "02.06.2010",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "13.02.2017",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2017-00284",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2010-0830, USN-944-1, MANDRIVA ID: MDVSA-2010:111, MANDRIVA ID: MDVSA-2010:112, DSA-2058, GLSA-201011-01, 2010:052, Security Tracker ID:1024044, BID ID:40063",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "USG6330, glibc",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Unix . , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux . ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0432\u044b\u0437\u043e\u0432\u044b \u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, glibc, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0447\u0438\u0441\u0435\u043b (CWE-189)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 elf_get_dynamic_info (elf/dynamic-link.h) \u043c\u043e\u0434\u0443\u043b\u044f ld.so \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0432\u044b\u0437\u043e\u0432\u044b \u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, glibc \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u043c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 ELF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0439 \u043e\u0442\u0440\u0438\u0446\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u0430 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b d_tag \u0432 ELF-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": "-",
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://drosenbe.blogspot.com/2010/05/integer-overflow-in-ldso-cve-2010-0830.html\nhttp://frugalware.org/security/662\nhttp://security.gentoo.org/glsa/glsa-201011-01.xml\nhttp://securitytracker.com/id?1024044\nhttp://sourceware.org/git/?p=glibc.git;a=commit;h=db07e962b6ea963dbb345439f6ab9b0cf74d87c5\nhttp://www.debian.org/security/2010/dsa-2058\nhttp://www.mandriva.com/security/advisories?name=MDVSA-2010:111\nhttp://www.mandriva.com/security/advisories?name=MDVSA-2010:112\nhttp://www.securityfocus.com/bid/40063\nhttp://www.ubuntu.com/usn/USN-944-1\nhttp://www.vupen.com/english/advisories/2010/1246\nhttp://xforce.iss.net/xforce/xfdb/58915\nhttps://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-189",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,1)"
}

BDU:2017-00285 (CVE-2010-0296)

Vulnerability from fstec – Published: 2017-02-13 – Updated: 2024-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимость библиотеки, обеспечивающей системные вызовы и основные функции glibc, позволяющая нарушителю вызвать отказ в обслуживании или повысить свои привилегии

Summary

Уязвимость функции encode_name (misc/mntent_r.c) библиотеки, обеспечивающей системные вызовы и основные функции glibc существует из-за ошибок при обработке символов новой строки в именах точек монтирования при использовании ncpmount и mount.cifs. Эксплуатация уязвимости может позволить нарушителю, действующему локально, вызвать отказ в обслуживании или повысить свои привилегии при помощи специально сформированного запроса на монтирование каталога

Severity

7.2 (High) CVSS 2.0


                      
                        AV:L/AC:L/Au:N/C:C/I:C/A:C

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Being clarified

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2010-0296, USN-944-1, MANDRIVA, ID:, MDVSA-2010:111, MDVSA-2010:112, DSA-2058, RHSA-2011:0412, GLSA-201011-01, 2010:052, SECURITY, TRACKER, ID:1024043, BUGTRAQ, ID:20111013

References

16 references

URL
http://frugalware.org/security/662
http://security.gentoo.org/glsa/glsa-201011-01.xml
http://securitytracker.com/id?1024043
http://sourceware.org/git/?p=glibc.git;a=commit;h=ab00f4eac8f4932211259ff87be83…
http://www.debian.org/security/2010/dsa-2058
http://www.mandriva.com/security/advisories?name=MDVSA-2010:111
http://www.mandriva.com/security/advisories?name=MDVSA-2010:112
http://www.redhat.com/support/errata/RHSA-2011-0412.html
http://www.securityfocus.com/archive/1/archive/1/520102/100/0/threaded
http://www.ubuntu.com/usn/USN-944-1
http://www.vmware.com/security/advisories/VMSA-2011-0012.html
http://www.vupen.com/english/advisories/2010/1246
http://www.vupen.com/english/advisories/2011/0863
http://xforce.iss.net/xforce/xfdb/59240
https://bugzilla.redhat.com/show_bug.cgi?id=559579
https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html

Impacted products

2 products from 3 vendors

Vendors

Huawei Technologies Co., Ltd., The GNU Project

Products

USG6330, glibc

Versions

V100R001C30SPC600 (USG6330), до 2.11.1 включительно (glibc)

Product types

ПО программно-аппаратных средств защиты, Application software

Platforms

Сообщество свободного программного обеспечения Unix ., Сообщество свободного программного обеспечения Linux .

Mitigations

Использование рекомендаций: Обновление библиотеки до актуальной версии Обновление программного обеспечения USG6330 до версии V500R005C20SPC500 и выше

Credits

-

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Huawei Technologies Co., Ltd., The GNU Project",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "V100R001C30SPC600 (USG6330), \u0434\u043e 2.11.1 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (glibc)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0434\u043e \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f USG6330 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 V500R005C20SPC500 \u0438 \u0432\u044b\u0448\u0435",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "02.06.2010",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "13.02.2017",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2017-00285",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2010-0296, USN-944-1, MANDRIVA ID: MDVSA-2010:111, MANDRIVA ID: MDVSA-2010:112, DSA-2058, RHSA-2011:0412, GLSA-201011-01, 2010:052, Security Tracker ID:1024043, Bugtraq ID:20111013",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "USG6330, glibc",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Unix . , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux . ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0432\u044b\u0437\u043e\u0432\u044b \u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 glibc, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 encode_name (misc/mntent_r.c) \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0432\u044b\u0437\u043e\u0432\u044b \u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 glibc \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043e\u043a \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \u043d\u043e\u0432\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0432 \u0438\u043c\u0435\u043d\u0430\u0445 \u0442\u043e\u0447\u0435\u043a \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 ncpmount \u0438 mount.cifs. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043d\u0430 \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": "-",
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://frugalware.org/security/662\nhttp://security.gentoo.org/glsa/glsa-201011-01.xml\nhttp://securitytracker.com/id?1024043\nhttp://sourceware.org/git/?p=glibc.git;a=commit;h=ab00f4eac8f4932211259ff87be83144f5211540\nhttp://www.debian.org/security/2010/dsa-2058\nhttp://www.mandriva.com/security/advisories?name=MDVSA-2010:111\nhttp://www.mandriva.com/security/advisories?name=MDVSA-2010:112\nhttp://www.redhat.com/support/errata/RHSA-2011-0412.html\nhttp://www.securityfocus.com/archive/1/archive/1/520102/100/0/threaded\nhttp://www.ubuntu.com/usn/USN-944-1\nhttp://www.vmware.com/security/advisories/VMSA-2011-0012.html\nhttp://www.vupen.com/english/advisories/2010/1246\nhttp://www.vupen.com/english/advisories/2011/0863\nhttp://xforce.iss.net/xforce/xfdb/59240\nhttps://bugzilla.redhat.com/show_bug.cgi?id=559579\nhttps://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,2)"
}

Find a vulnerability

Search criteria ⓘ Use this form to refine search results. Full-text search supports keyword queries with ranking and filtering. You can combine vendor, product, and sources to narrow results. Enable “Apply ordering” to sort by date instead of relevance.

Related vulnerabilities

BDU:2015-01134 (CVE-2008-1391)

BDU:2015-01135 (CVE-2008-1391)

BDU:2015-01136 (CVE-2008-1391)

BDU:2015-01137 (CVE-2008-1391)

BDU:2015-01138 (CVE-2008-1391)

BDU:2015-01139 (CVE-2008-1391)

BDU:2015-01140 (CVE-2008-1391)

BDU:2015-01141 (CVE-2008-1391)

BDU:2015-01142 (CVE-2008-1391)

BDU:2015-01143 (CVE-2008-1391)

BDU:2015-01144 (CVE-2008-1391)

BDU:2015-01145 (CVE-2008-1391)

BDU:2015-01146 (CVE-2008-1391)

BDU:2015-01147 (CVE-2008-1391)

BDU:2015-01148 (CVE-2008-1391)

BDU:2015-01149 (CVE-2008-1391)

BDU:2015-01150 (CVE-2008-1391)

BDU:2015-01151 (CVE-2008-1391)

BDU:2015-01152 (CVE-2008-1391)

BDU:2015-01153 (CVE-2008-1391)

BDU:2015-01154 (CVE-2008-1391)

BDU:2015-01155 (CVE-2008-1391)

BDU:2015-01156 (CVE-2008-1391)

BDU:2015-01157 (CVE-2008-1391)

BDU:2015-01158 (CVE-2008-1391)

BDU:2015-01159 (CVE-2008-1391)

BDU:2015-01160 (CVE-2008-1391)

BDU:2015-01161 (CVE-2008-1391)

BDU:2015-01162 (CVE-2008-1391)

BDU:2015-01163 (CVE-2008-1391)

BDU:2015-01164 (CVE-2008-1391)

BDU:2015-01165 (CVE-2008-1391)

BDU:2015-01166 (CVE-2008-1391)

BDU:2015-01167 (CVE-2008-1391)

BDU:2015-01168 (CVE-2008-1391)

BDU:2015-01169 (CVE-2008-1391)

BDU:2015-01170 (CVE-2008-1391)

BDU:2017-00284 (CVE-2010-0830)

BDU:2017-00285 (CVE-2010-0296)

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.