RHEL 7 : augeas (RHSA-2017:2788)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:2788 advisory. Augeas is a configuration editing tool. It parses configuration files in their native formats and transforms them into a tree. Configuration changes...

Scientific Linux Security Update : augeas on SL7.x x86_64 (20170921)

Security Fixes : - A vulnerability was discovered in augeas affecting the handling of escaped strings. An attacker could send crafted strings that would cause the application using augeas to copy past the end of a buffer, leading to a crash or possible code execution. CVE-2017-7555 %NASLMINLEVEL...

CentOS 7 : augeas (CESA-2017:2788)

An update for augeas is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Fedora 25 : augeas (2017-7dacb3c21c)

New upstream version 1.8.1. Fixes CVE-2017-7555 RHBZ1482340. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

Fedora 26 : augeas (2017-8bd521abc9)

New upstream version 1.8.1. Fixes CVE-2017-7555 RHBZ1482340. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

Fedora Update for augeas FEDORA-2017-8bd521abc9

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated augeas packages fix security vulnerability

A vulnerability was discovered in augeas affecting the handling of escaped strings. An attacker could send crafted strings that would cause the application using augeas to copy past the end of a buffer, leading to a crash or possible code execution CVE-2017-7555...

[SECURITY] [DSA 3949-1] augeas security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3949-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 21, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3949-1] augeas security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3949-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 21, 2017 https://www.debian.org/security/faq -...

CVE-2017-7555

A CVE-2017-7555 issue affects Augeas (versions up to 1.8.0). Root cause: heap-based buffer overflow due to improper handling of escaped strings, which an attacker could exploit by sending crafted strings to cause a crash or potentially execute code in the context of the vulnerable application. Pu...