Red Hat Security AdvisoryRHSA-2019:2403
augeas security update
Released 2019-08-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.3) augeas-1.4.0-2.el7_3.1, augeas-libs-1.4.0-2.el7_3.1
- Red Hat Enterprise Linux Server E4S (v. 7.3) augeas-1.4.0-2.el7_3.1, augeas-libs-1.4.0-2.el7_3.1
- Red Hat Enterprise Linux Server Optional AUS (v. 7.3) augeas-devel-1.4.0-2.el7_3.1
- Red Hat Enterprise Linux Server Optional E4S (v. 7.3) augeas-devel-1.4.0-2.el7_3.1
- Red Hat Enterprise Linux Server Optional TUS (v. 7.3) augeas-devel-1.4.0-2.el7_3.1
- Red Hat Enterprise Linux Server TUS (v. 7.3) augeas-1.4.0-2.el7_3.1, augeas-libs-1.4.0-2.el7_3.1
Fixes 1 record
Priority MEDIUM 50
Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of escaped strings.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05204 · Published 2017-08-17 · Partial fix CWE-122