Test Kennung:	1.3.6.1.4.1.25623.1.0.882357
Kategorie:	CentOS Local Security Checks
Titel:	CentOS Update for gnutls CESA-2016:0012 centos7
Zusammenfassung:	Check the version of gnutls
Beschreibung:	Summary: Check the version of gnutls Vulnerability Insight: The GnuTLS library provides support for cryptographic algorithms and for protocols such as Transport Layer Security (TLS). A flaw was found in the way TLS 1.2 could use the MD5 hash function for signing ServerKeyExchange and Client Authentication packets during a TLS handshake. A man-in-the-middle attacker able to force a TLS connection to use the MD5 hash function could use this flaw to conduct collision attacks to impersonate a TLS server or an authenticated TLS client. (CVE-2015-7575) All gnutls users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. For the update to take effect, all applications linked to the GnuTLS library must be restarted. Affected Software/OS: gnutls on CentOS 7 Solution: Please Install the Updated Packages. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-7575 1034541 http://www.securitytracker.com/id/1034541 1036467 http://www.securitytracker.com/id/1036467 79684 http://www.securityfocus.com/bid/79684 91787 http://www.securityfocus.com/bid/91787 DSA-3436 http://www.debian.org/security/2016/dsa-3436 DSA-3437 http://www.debian.org/security/2016/dsa-3437 DSA-3457 http://www.debian.org/security/2016/dsa-3457 DSA-3458 http://www.debian.org/security/2016/dsa-3458 DSA-3465 http://www.debian.org/security/2016/dsa-3465 DSA-3491 http://www.debian.org/security/2016/dsa-3491 DSA-3688 http://www.debian.org/security/2016/dsa-3688 GLSA-201701-46 https://security.gentoo.org/glsa/201701-46 GLSA-201706-18 https://security.gentoo.org/glsa/201706-18 GLSA-201801-15 https://security.gentoo.org/glsa/201801-15 RHSA-2016:0049 http://rhn.redhat.com/errata/RHSA-2016-0049.html RHSA-2016:0050 http://rhn.redhat.com/errata/RHSA-2016-0050.html RHSA-2016:0053 http://rhn.redhat.com/errata/RHSA-2016-0053.html RHSA-2016:0054 http://rhn.redhat.com/errata/RHSA-2016-0054.html RHSA-2016:0055 http://rhn.redhat.com/errata/RHSA-2016-0055.html RHSA-2016:0056 http://rhn.redhat.com/errata/RHSA-2016-0056.html RHSA-2016:1430 https://access.redhat.com/errata/RHSA-2016:1430 SUSE-SU-2016:0256 http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html SUSE-SU-2016:0265 http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html SUSE-SU-2016:0269 http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html USN-2863-1 http://www.ubuntu.com/usn/USN-2863-1 USN-2864-1 http://www.ubuntu.com/usn/USN-2864-1 USN-2865-1 http://www.ubuntu.com/usn/USN-2865-1 USN-2866-1 http://www.ubuntu.com/usn/USN-2866-1 USN-2884-1 http://www.ubuntu.com/usn/USN-2884-1 USN-2904-1 http://www.ubuntu.com/usn/USN-2904-1 http://www.mozilla.org/security/announce/2015/mfsa2015-150.html http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html https://bugzilla.mozilla.org/show_bug.cgi?id=1158489 https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.20.2_release_notes https://security.netapp.com/advisory/ntap-20160225-0001/ openSUSE-SU-2015:2405 http://lists.opensuse.org/opensuse-updates/2015-12/msg00139.html openSUSE-SU-2016:0007 http://lists.opensuse.org/opensuse-updates/2016-01/msg00005.html openSUSE-SU-2016:0161 http://lists.opensuse.org/opensuse-updates/2016-01/msg00058.html openSUSE-SU-2016:0162 http://lists.opensuse.org/opensuse-updates/2016-01/msg00059.html openSUSE-SU-2016:0263 http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html openSUSE-SU-2016:0268 http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html openSUSE-SU-2016:0270 http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html openSUSE-SU-2016:0272 http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html openSUSE-SU-2016:0279 http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html openSUSE-SU-2016:0307 http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html openSUSE-SU-2016:0308 http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html openSUSE-SU-2016:0488 http://lists.opensuse.org/opensuse-updates/2016-02/msg00101.html openSUSE-SU-2016:0605 http://lists.opensuse.org/opensuse-updates/2016-02/msg00166.html
Copyright	Copyright (C) 2016 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.