Red Hat Security AdvisoryRHSA-2015:2248
netcf security, bug fix, and enhancement update
Released 2015-11-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) netcf-0.2.8-1.el7, netcf-libs-0.2.8-1.el7
- Red Hat Enterprise Linux Client Optional (v. 7) netcf-0.2.8-1.el7, netcf-devel-0.2.8-1.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) netcf-0.2.8-1.el7, netcf-devel-0.2.8-1.el7, netcf-libs-0.2.8-1.el7
- Red Hat Enterprise Linux Server (v. 7) netcf-0.2.8-1.el7, netcf-libs-0.2.8-1.el7, netcf-libs-0.2.8-1.el7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) netcf-0.2.8-1.el7, netcf-devel-0.2.8-1.el7, netcf-devel-0.2.8-1.el7.ppc
- Red Hat Enterprise Linux Workstation (v. 7) netcf-0.2.8-1.el7, netcf-libs-0.2.8-1.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) netcf-0.2.8-1.el7, netcf-devel-0.2.8-1.el7
Fixes 1 record
Priority LOW 38
The find_ifcfg_path function in netcf before 0.2.7 might allow attackers to cause a denial of service (application crash) via vectors involving augeas path expressions.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.0265 · Published 2017-12-29 · Fixed CWE-20
