Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

BDU:2015-01134 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2024-07-05 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета glibc-doc операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "27.03.2008",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "05.07.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01134",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 glibc-doc \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01135 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета glibc-source операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01135",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 glibc-source \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01136 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01136",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01137 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6.1 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01137",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6.1 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01138 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6.1-alphaev67 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01138",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6.1-alphaev67 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01139 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6.1-dbg операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01139",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6.1-dbg \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01140 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6.1-dev операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01140",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6.1-dev \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01141 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6.1-pic операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-189 - Ошибки, возникающие при обработке чисел

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01141",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0447\u0438\u0441\u0435\u043b (CWE-189)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6.1-pic \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-189",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01142 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6.1-prof операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-189 - Ошибки, возникающие при обработке чисел

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01142",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0447\u0438\u0441\u0435\u043b (CWE-189)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6.1-prof \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-189",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01143 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6.1-udeb операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01143",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6.1-udeb \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01144 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-amd64 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01144",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-amd64 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01145 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dbg операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01145",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dbg \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01146 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dev операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01146",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dev \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01147 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dev-amd64 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01147",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dev-amd64 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01148 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dev-i386 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01148",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dev-i386 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01149 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dev-mips64 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01149",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dev-mips64 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01150 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dev-mipsn32 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01150",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dev-mipsn32 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01151 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dev-ppc64 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01151",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dev-ppc64 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01152 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dev-s390x операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01152",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dev-s390x \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01153 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dev-sparc64 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01153",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dev-sparc64 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01154 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-i386 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01154",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-i386 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01155 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-i686 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01155",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-i686 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01156 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-mips64 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-189 - Ошибки, возникающие при обработке чисел

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01156",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0447\u0438\u0441\u0435\u043b (CWE-189)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-mips64 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-189",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01157 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-mipsn32 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01157",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-mipsn32 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01158 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-pic операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01158",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-pic \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01159 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-ppc64 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-189 - Ошибки, возникающие при обработке чисел

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01159",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0447\u0438\u0441\u0435\u043b (CWE-189)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-ppc64 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-189",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01160 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-prof операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01160",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-prof \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01161 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-s390x операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-189 - Ошибки, возникающие при обработке чисел

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01161",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0447\u0438\u0441\u0435\u043b (CWE-189)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-s390x \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-189",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01162 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-sparc64 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-189 - Ошибки, возникающие при обработке чисел

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01162",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0447\u0438\u0441\u0435\u043b (CWE-189)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-sparc64 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-189",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01163 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-sparcv9b операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01163",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-sparcv9b \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01164 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-udeb операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01164",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-udeb \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01165 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-xen операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01165",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-xen \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01166 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libnss-dns-udeb операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01166",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libnss-dns-udeb \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01167 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libnss-files-udeb операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01167",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libnss-files-udeb \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01168 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета locales операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01168",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 locales \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01169 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета locales-all операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01169",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 locales-all \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01170 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета nscd операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01170",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 nscd \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

Find a vulnerability

Search criteria

Related vulnerabilities

BDU:2015-01134 (CVE-2008-1391)

BDU:2015-01135 (CVE-2008-1391)

BDU:2015-01136 (CVE-2008-1391)

BDU:2015-01137 (CVE-2008-1391)

BDU:2015-01138 (CVE-2008-1391)

BDU:2015-01139 (CVE-2008-1391)

BDU:2015-01140 (CVE-2008-1391)

BDU:2015-01141 (CVE-2008-1391)

BDU:2015-01142 (CVE-2008-1391)

BDU:2015-01143 (CVE-2008-1391)

BDU:2015-01144 (CVE-2008-1391)

BDU:2015-01145 (CVE-2008-1391)

BDU:2015-01146 (CVE-2008-1391)

BDU:2015-01147 (CVE-2008-1391)

BDU:2015-01148 (CVE-2008-1391)

BDU:2015-01149 (CVE-2008-1391)

BDU:2015-01150 (CVE-2008-1391)

BDU:2015-01151 (CVE-2008-1391)

BDU:2015-01152 (CVE-2008-1391)

BDU:2015-01153 (CVE-2008-1391)

BDU:2015-01154 (CVE-2008-1391)

BDU:2015-01155 (CVE-2008-1391)

BDU:2015-01156 (CVE-2008-1391)

BDU:2015-01157 (CVE-2008-1391)

BDU:2015-01158 (CVE-2008-1391)

BDU:2015-01159 (CVE-2008-1391)

BDU:2015-01160 (CVE-2008-1391)

BDU:2015-01161 (CVE-2008-1391)

BDU:2015-01162 (CVE-2008-1391)

BDU:2015-01163 (CVE-2008-1391)

BDU:2015-01164 (CVE-2008-1391)

BDU:2015-01165 (CVE-2008-1391)

BDU:2015-01166 (CVE-2008-1391)

BDU:2015-01167 (CVE-2008-1391)

BDU:2015-01168 (CVE-2008-1391)

BDU:2015-01169 (CVE-2008-1391)

BDU:2015-01170 (CVE-2008-1391)