Red Hat Security AdvisoryRHSA-2017:2788
augeas security update
Released 2017-09-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) augeas-1.4.0-2.el7_4.1, augeas-libs-1.4.0-2.el7_4.1
- Red Hat Enterprise Linux Client Optional (v. 7) augeas-devel-1.4.0-2.el7_4.1
- Red Hat Enterprise Linux ComputeNode (v. 7) augeas-1.4.0-2.el7_4.1, augeas-libs-1.4.0-2.el7_4.1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) augeas-devel-1.4.0-2.el7_4.1
- Red Hat Enterprise Linux Server (v. 7) augeas-1.4.0-2.el7_4.1, augeas-libs-1.4.0-2.el7_4.1, augeas-libs-1.4.0-2.el7_4.1.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) augeas-devel-1.4.0-2.el7_4.1, augeas-devel-1.4.0-2.el7_4.1.ppc
- Red Hat Enterprise Linux Workstation (v. 7) augeas-1.4.0-2.el7_4.1, augeas-libs-1.4.0-2.el7_4.1
- Red Hat Enterprise Linux Workstation Optional (v. 7) augeas-devel-1.4.0-2.el7_4.1
Fixes 1 record
Priority MEDIUM 50
Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of escaped strings.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05204 · Published 2017-08-17 · Partial fix CWE-122