Vulnerability-Lookup

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

Full-Text Search

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

BDU:2015-01134 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2024-07-05 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета glibc-doc операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "27.03.2008",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "05.07.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01134",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 glibc-doc \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01135 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета glibc-source операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01135",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 glibc-source \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01136 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01136",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01137 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6.1 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01137",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6.1 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01138 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6.1-alphaev67 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01138",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6.1-alphaev67 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01139 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6.1-dbg операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01139",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6.1-dbg \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01140 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6.1-dev операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01140",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6.1-dev \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01141 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6.1-pic операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-189 - Ошибки, возникающие при обработке чисел

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01141",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0447\u0438\u0441\u0435\u043b (CWE-189)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6.1-pic \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-189",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01142 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6.1-prof операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-189 - Ошибки, возникающие при обработке чисел

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01142",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0447\u0438\u0441\u0435\u043b (CWE-189)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6.1-prof \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-189",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01143 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6.1-udeb операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01143",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6.1-udeb \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01144 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-amd64 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01144",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-amd64 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01145 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dbg операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01145",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dbg \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01146 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dev операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01146",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dev \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01147 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dev-amd64 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01147",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dev-amd64 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01148 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dev-i386 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01148",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dev-i386 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01149 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dev-mips64 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01149",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dev-mips64 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01150 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dev-mipsn32 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01150",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dev-mipsn32 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01151 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dev-ppc64 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01151",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dev-ppc64 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01152 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dev-s390x операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01152",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dev-s390x \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01153 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-dev-sparc64 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01153",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-dev-sparc64 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01154 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-i386 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01154",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-i386 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01155 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-i686 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01155",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-i686 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01156 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-mips64 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-189 - Ошибки, возникающие при обработке чисел

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01156",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0447\u0438\u0441\u0435\u043b (CWE-189)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-mips64 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-189",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01157 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-mipsn32 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01157",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-mipsn32 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01158 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-pic операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01158",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-pic \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01159 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-ppc64 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-189 - Ошибки, возникающие при обработке чисел

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01159",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0447\u0438\u0441\u0435\u043b (CWE-189)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-ppc64 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-189",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01160 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-prof операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01160",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-prof \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01161 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-s390x операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-189 - Ошибки, возникающие при обработке чисел

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01161",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0447\u0438\u0441\u0435\u043b (CWE-189)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-s390x \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-189",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01162 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-sparc64 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-189 - Ошибки, возникающие при обработке чисел

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01162",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0447\u0438\u0441\u0435\u043b (CWE-189)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-sparc64 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-189",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01163 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-sparcv9b операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01163",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-sparcv9b \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01164 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-udeb операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01164",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-udeb \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01165 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libc6-xen операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01165",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libc6-xen \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01166 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libnss-dns-udeb операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01166",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libnss-dns-udeb \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01167 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libnss-files-udeb операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01167",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libnss-files-udeb \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01168 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета locales операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01168",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 locales \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01169 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета locales-all операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01169",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 locales-all \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

BDU:2015-01170 (CVE-2008-1391)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета nscd операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020

References

6 references

URL
http://www.debian.org/security/dsa-2058/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 5 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 5: ppc: libc6-ppc64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dev-ppc64 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 s390x: libc6-dev-s390x - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-s390x - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 nscd - 2.7-18lenny4 i686: nscd - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-i686 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-xen - 2.7-18lenny4 libc6-amd64 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-amd64 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 hppa: libnss-files-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6 - 2.7-18lenny4 nscd - 2.7-18lenny4 sparc: libc6-sparc64 - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-dev-sparc64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-sparcv9b - 2.7-18lenny4 x86-64: libc6-dev-i386 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-i386 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6 - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 armel: libc6-dbg - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 alpha: libc6.1-pic - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6.1-alphaev67 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 ia64: locales-all - 2.7-18lenny4 libc6.1-udeb - 2.7-18lenny4 libc6.1 - 2.7-18lenny4 libc6.1-dbg - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6.1-dev - 2.7-18lenny4 libc6.1-prof - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6.1-pic - 2.7-18lenny4 mips: libc6-prof - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 locales-all - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 libc6-mips64 - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 noarch: glibc-source - 2.7-18lenny4 locales - 2.7-18lenny4 glibc-doc - 2.7-18lenny4 mipsel: libc6-mips64 - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 nscd - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-dev-mips64 - 2.7-18lenny4 libc6-dev-mipsn32 - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-files-udeb - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6-prof - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 libc6-mipsn32 - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 arm: libnss-files-udeb - 2.7-18lenny4 libc6-dev - 2.7-18lenny4 locales-all - 2.7-18lenny4 libc6-udeb - 2.7-18lenny4 libc6-dbg - 2.7-18lenny4 nscd - 2.7-18lenny4 libc6-pic - 2.7-18lenny4 libc6 - 2.7-18lenny4 libnss-dns-udeb - 2.7-18lenny4 libc6-prof - 2.7-18lenny4

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibc6-ppc64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dev-ppc64 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\ts390x:\n\t\tlibc6-dev-s390x - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-s390x - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\ti686:\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-i686 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-xen - 2.7-18lenny4\n\t\tlibc6-amd64 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-amd64 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\thppa:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\tsparc:\n\t\tlibc6-sparc64 - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-dev-sparc64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-sparcv9b - 2.7-18lenny4\n\tx86-64:\n\t\tlibc6-dev-i386 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-i386 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\tarmel:\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\talpha:\n\t\tlibc6.1-pic - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6.1-alphaev67 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\tia64:\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6.1-udeb - 2.7-18lenny4\n\t\tlibc6.1 - 2.7-18lenny4\n\t\tlibc6.1-dbg - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6.1-dev - 2.7-18lenny4\n\t\tlibc6.1-prof - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6.1-pic - 2.7-18lenny4\n\tmips:\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\tnoarch:\n\t\tglibc-source - 2.7-18lenny4\n\t\tlocales - 2.7-18lenny4\n\t\tglibc-doc - 2.7-18lenny4\n\tmipsel:\n\t\tlibc6-mips64 - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-dev-mips64 - 2.7-18lenny4\n\t\tlibc6-dev-mipsn32 - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlibc6-mipsn32 - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\tarm:\n\t\tlibnss-files-udeb - 2.7-18lenny4\n\t\tlibc6-dev - 2.7-18lenny4\n\t\tlocales-all - 2.7-18lenny4\n\t\tlibc6-udeb - 2.7-18lenny4\n\t\tlibc6-dbg - 2.7-18lenny4\n\t\tnscd - 2.7-18lenny4\n\t\tlibc6-pic - 2.7-18lenny4\n\t\tlibc6 - 2.7-18lenny4\n\t\tlibnss-dns-udeb - 2.7-18lenny4\n\t\tlibc6-prof - 2.7-18lenny4",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01170",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-1391, CVE-2009-4880, CVE-2009-4881, CVE-2010-0296, CVE-2010-0830, DSA-2058, ID:1400020",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 nscd \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-2058/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

Related vulnerabilities

BDU:2015-01134 (CVE-2008-1391)

BDU:2015-01135 (CVE-2008-1391)

BDU:2015-01136 (CVE-2008-1391)

BDU:2015-01137 (CVE-2008-1391)

BDU:2015-01138 (CVE-2008-1391)

BDU:2015-01139 (CVE-2008-1391)

BDU:2015-01140 (CVE-2008-1391)

BDU:2015-01141 (CVE-2008-1391)

BDU:2015-01142 (CVE-2008-1391)

BDU:2015-01143 (CVE-2008-1391)

BDU:2015-01144 (CVE-2008-1391)

BDU:2015-01145 (CVE-2008-1391)

BDU:2015-01146 (CVE-2008-1391)

BDU:2015-01147 (CVE-2008-1391)

BDU:2015-01148 (CVE-2008-1391)

BDU:2015-01149 (CVE-2008-1391)

BDU:2015-01150 (CVE-2008-1391)

BDU:2015-01151 (CVE-2008-1391)

BDU:2015-01152 (CVE-2008-1391)

BDU:2015-01153 (CVE-2008-1391)

BDU:2015-01154 (CVE-2008-1391)

BDU:2015-01155 (CVE-2008-1391)

BDU:2015-01156 (CVE-2008-1391)

BDU:2015-01157 (CVE-2008-1391)

BDU:2015-01158 (CVE-2008-1391)

BDU:2015-01159 (CVE-2008-1391)

BDU:2015-01160 (CVE-2008-1391)

BDU:2015-01161 (CVE-2008-1391)

BDU:2015-01162 (CVE-2008-1391)

BDU:2015-01163 (CVE-2008-1391)

BDU:2015-01164 (CVE-2008-1391)

BDU:2015-01165 (CVE-2008-1391)

BDU:2015-01166 (CVE-2008-1391)

BDU:2015-01167 (CVE-2008-1391)

BDU:2015-01168 (CVE-2008-1391)

BDU:2015-01169 (CVE-2008-1391)

BDU:2015-01170 (CVE-2008-1391)

Find a vulnerability

Search criteria ⓘ Use this form to refine search results. Full-text search supports keyword queries with ranking and filtering. You can combine vendor, product, and sources to narrow results. Enable “Apply ordering” to sort by date instead of relevance.

Related vulnerabilities

BDU:2015-01134 (CVE-2008-1391)

BDU:2015-01135 (CVE-2008-1391)

BDU:2015-01136 (CVE-2008-1391)

BDU:2015-01137 (CVE-2008-1391)

BDU:2015-01138 (CVE-2008-1391)

BDU:2015-01139 (CVE-2008-1391)

BDU:2015-01140 (CVE-2008-1391)

BDU:2015-01141 (CVE-2008-1391)

BDU:2015-01142 (CVE-2008-1391)

BDU:2015-01143 (CVE-2008-1391)

BDU:2015-01144 (CVE-2008-1391)

BDU:2015-01145 (CVE-2008-1391)

BDU:2015-01146 (CVE-2008-1391)

BDU:2015-01147 (CVE-2008-1391)

BDU:2015-01148 (CVE-2008-1391)

BDU:2015-01149 (CVE-2008-1391)

BDU:2015-01150 (CVE-2008-1391)

BDU:2015-01151 (CVE-2008-1391)

BDU:2015-01152 (CVE-2008-1391)

BDU:2015-01153 (CVE-2008-1391)

BDU:2015-01154 (CVE-2008-1391)

BDU:2015-01155 (CVE-2008-1391)

BDU:2015-01156 (CVE-2008-1391)

BDU:2015-01157 (CVE-2008-1391)

BDU:2015-01158 (CVE-2008-1391)

BDU:2015-01159 (CVE-2008-1391)

BDU:2015-01160 (CVE-2008-1391)

BDU:2015-01161 (CVE-2008-1391)

BDU:2015-01162 (CVE-2008-1391)

BDU:2015-01163 (CVE-2008-1391)

BDU:2015-01164 (CVE-2008-1391)

BDU:2015-01165 (CVE-2008-1391)

BDU:2015-01166 (CVE-2008-1391)

BDU:2015-01167 (CVE-2008-1391)

BDU:2015-01168 (CVE-2008-1391)

BDU:2015-01169 (CVE-2008-1391)

BDU:2015-01170 (CVE-2008-1391)

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.