{"id":213173,"date":"2018-12-21T23:40:36","date_gmt":"2018-12-21T22:40:36","guid":{"rendered":"https:\/\/www.borncity.com\/blog\/?p=213173"},"modified":"2018-12-21T23:40:36","modified_gmt":"2018-12-21T22:40:36","slug":"security-advisory-synology-sa-1861-wegen-magellan","status":"publish","type":"post","link":"https:\/\/borncity.com\/blog\/2018\/12\/21\/security-advisory-synology-sa-1861-wegen-magellan\/","title":{"rendered":"Security Advisory Synology-SA-18:61 wegen Magellan"},"content":{"rendered":"

Hersteller Synology hat zum 18.12.2018 eine Sicherheitsmeldung (Security Advisory) wegen der Magellan-Sicherheitsl\u00fccke in seinen Produkten herausgegeben. Hier eine kurze \u00dcbersicht.<\/p>\n

<\/p>\n

Blog-Leser @PhantomofMobile hat mir die Mail von Synology mit der Sicherheitsmeldung  zukommen lassen. Es geht um die Magellan-Sicherheitsl\u00fccke in SQLite, die ich im Blog-Beitrag Magellan: SQLite-Schwachstelle gef\u00e4hrdet viele Apps<\/a> thematisiert habe. Im Security Advisory Synology-SA-18:61 schreibt der Hersteller:<\/p>\n

Abstract<\/strong> <\/p>\n

Magellan vulnerability allows remote authenticated users to conduct denial-of-service attacks or possibly execute arbitrary code via a susceptible version of Synology products. <\/p>\n

Affected Products<\/strong><\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Product<\/td>\nSeverity<\/td>\nFixed Release Availability<\/td>\n<\/tr>\n
DSM 6.2<\/td>\nModerate<\/td>\nOngoing<\/td>\n<\/tr>\n
DSM 6.1<\/td>\nModerate<\/td>\nPending<\/td>\n<\/tr>\n
DSM 5.2<\/td>\nModerate<\/td>\nPending<\/td>\n<\/tr>\n
SkyNAS<\/td>\nModerate<\/td>\nPending<\/td>\n<\/tr>\n
VS960HD<\/td>\nModerate<\/td>\nOngoing<\/td>\n<\/tr>\n
SRM 1.2<\/td>\nModerate<\/td>\nOngoing<\/td>\n<\/tr>\n
Active Backup<\/td>\nModerate<\/td>\nOngoing<\/td>\n<\/tr>\n
Download Station<\/td>\nModerate<\/td>\nOngoing<\/td>\n<\/tr>\n
Log Center<\/td>\nModerate<\/td>\nOngoing<\/td>\n<\/tr>\n
Mail Server<\/td>\nModerate<\/td>\nOngoing<\/td>\n<\/tr>\n
MailPlus<\/td>\nModerate<\/td>\nOngoing<\/td>\n<\/tr>\n
MailPlus Server<\/td>\nModerate<\/td>\nOngoing<\/td>\n<\/tr>\n
Python 3<\/td>\nModerate<\/td>\nOngoing<\/td>\n<\/tr>\n
Surveillance Station<\/td>\nModerate<\/td>\nOngoing<\/td>\n<\/tr>\n
Synology Application Service<\/td>\nModerate<\/td>\nOngoing<\/td>\n<\/tr>\n
Universal Search<\/td>\nModerate<\/td>\nOngoing<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Aktuell ist kein Fix zum Schlie\u00dfen der Schwachstelle vorhanden.<\/p>\n","protected":false},"excerpt":{"rendered":"

Hersteller Synology hat zum 18.12.2018 eine Sicherheitsmeldung (Security Advisory) wegen der Magellan-Sicherheitsl\u00fccke in seinen Produkten herausgegeben. Hier eine kurze \u00dcbersicht.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[426],"tags":[4328],"class_list":["post-213173","post","type-post","status-publish","format-standard","hentry","category-sicherheit","tag-sicherheit"],"_links":{"self":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts\/213173","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/comments?post=213173"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts\/213173\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/media?parent=213173"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/categories?post=213173"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/tags?post=213173"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}