Test Kennung:	1.3.6.1.4.1.25623.1.0.120130
Kategorie:	Amazon Linux Local Security Checks
Titel:	Amazon Linux: Security Advisory (ALAS-2012-85)
Zusammenfassung:	The remote host is missing an update for the 'openssl' package(s) announced via the ALAS-2012-85 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'openssl' package(s) announced via the ALAS-2012-85 advisory. Vulnerability Insight: An integer underflow flaw, leading to a buffer over-read, was found in the way OpenSSL handled DTLS (Datagram Transport Layer Security) application data record lengths when using a block cipher in CBC (cipher-block chaining) mode. A malicious DTLS client or server could use this flaw to crash its DTLS connection peer. (CVE-2012-2333) Affected Software/OS: 'openssl' package(s) on Amazon Linux. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2333 http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html BugTraq ID: 53476 http://www.securityfocus.com/bid/53476 CERT/CC vulnerability note: VU#737740 http://www.kb.cert.org/vuls/id/737740 Debian Security Information: DSA-2475 (Google Search) http://www.debian.org/security/2012/dsa-2475 http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081460.html HPdes Security Advisory: HPSBOV02852 http://marc.info/?l=bugtraq&m=136432043316835&w=2 HPdes Security Advisory: HPSBUX02814 http://marc.info/?l=bugtraq&m=134919053717161&w=2 HPdes Security Advisory: SSRT100930 HPdes Security Advisory: SSRT101108 http://www.mandriva.com/security/advisories?name=MDVSA-2012:073 http://www.cert.fi/en/reports/2012/vulnerability641549.html RedHat Security Advisories: RHSA-2012:0699 http://rhn.redhat.com/errata/RHSA-2012-0699.html RedHat Security Advisories: RHSA-2012:1306 http://rhn.redhat.com/errata/RHSA-2012-1306.html RedHat Security Advisories: RHSA-2012:1307 http://rhn.redhat.com/errata/RHSA-2012-1307.html RedHat Security Advisories: RHSA-2012:1308 http://rhn.redhat.com/errata/RHSA-2012-1308.html http://www.securitytracker.com/id?1027057 http://secunia.com/advisories/49116 http://secunia.com/advisories/49208 http://secunia.com/advisories/49324 http://secunia.com/advisories/50768 http://secunia.com/advisories/51312 SuSE Security Announcement: SUSE-SU-2012:0678 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00019.html SuSE Security Announcement: SUSE-SU-2012:0679 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00020.html XForce ISS Database: openssl-tls-record-dos(75525) https://exchange.xforce.ibmcloud.com/vulnerabilities/75525
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.