ID de Prueba:	1.3.6.1.4.1.25623.1.0.123331
Categoría:	Oracle Linux Local Security Checks
Título:	Oracle: Security Advisory (ELSA-2014-1052)
Resumen:	The remote host is missing an update for the 'openssl' package(s) announced via the ELSA-2014-1052 advisory.
Descripción:	Summary: The remote host is missing an update for the 'openssl' package(s) announced via the ELSA-2014-1052 advisory. Vulnerability Insight: [1.0.1e-34.4] - fix CVE-2014-3505 - doublefree in DTLS packet processing - fix CVE-2014-3506 - avoid memory exhaustion in DTLS - fix CVE-2014-3507 - avoid memory leak in DTLS - fix CVE-2014-3508 - fix OID handling to avoid information leak - fix CVE-2014-3509 - fix race condition when parsing server hello - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS - fix CVE-2014-3511 - disallow protocol downgrade via fragmentation Affected Software/OS: 'openssl' package(s) on Oracle Linux 6, Oracle Linux 7. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3505 BugTraq ID: 69081 http://www.securityfocus.com/bid/69081 Debian Security Information: DSA-2998 (Google Search) http://www.debian.org/security/2014/dsa-2998 http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html http://security.gentoo.org/glsa/glsa-201412-39.xml HPdes Security Advisory: HPSBHF03293 http://marc.info/?l=bugtraq&m=142660345230545&w=2 HPdes Security Advisory: HPSBOV03099 http://marc.info/?l=bugtraq&m=141077370928502&w=2 HPdes Security Advisory: HPSBUX03095 http://marc.info/?l=bugtraq&m=140853041709441&w=2 HPdes Security Advisory: SSRT101674 HPdes Security Advisory: SSRT101846 http://www.mandriva.com/security/advisories?name=MDVSA-2014:158 https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html NETBSD Security Advisory: NetBSD-SA2014-008 ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc RedHat Security Advisories: RHSA-2014:1256 http://rhn.redhat.com/errata/RHSA-2014-1256.html RedHat Security Advisories: RHSA-2014:1297 http://rhn.redhat.com/errata/RHSA-2014-1297.html http://www.securitytracker.com/id/1030693 http://secunia.com/advisories/58962 http://secunia.com/advisories/59221 http://secunia.com/advisories/59700 http://secunia.com/advisories/59710 http://secunia.com/advisories/59743 http://secunia.com/advisories/59756 http://secunia.com/advisories/60022 http://secunia.com/advisories/60221 http://secunia.com/advisories/60493 http://secunia.com/advisories/60684 http://secunia.com/advisories/60687 http://secunia.com/advisories/60778 http://secunia.com/advisories/60803 http://secunia.com/advisories/60824 http://secunia.com/advisories/60917 http://secunia.com/advisories/60921 http://secunia.com/advisories/60938 http://secunia.com/advisories/61040 http://secunia.com/advisories/61100 http://secunia.com/advisories/61184 http://secunia.com/advisories/61250 http://secunia.com/advisories/61775 http://secunia.com/advisories/61959 SuSE Security Announcement: openSUSE-SU-2014:1052 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html SuSE Security Announcement: openSUSE-SU-2016:0640 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html Common Vulnerability Exposure (CVE) ID: CVE-2014-3506 BugTraq ID: 69076 http://www.securityfocus.com/bid/69076 FreeBSD Security Advisory: FreeBSD-SA-14:18 https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc http://secunia.com/advisories/61017 XForce ISS Database: openssl-cve20143506-dos(95160) https://exchange.xforce.ibmcloud.com/vulnerabilities/95160 Common Vulnerability Exposure (CVE) ID: CVE-2014-3507 BugTraq ID: 69078 http://www.securityfocus.com/bid/69078 XForce ISS Database: openssl-cve20143507-dos(95161) https://exchange.xforce.ibmcloud.com/vulnerabilities/95161 Common Vulnerability Exposure (CVE) ID: CVE-2014-3508 BugTraq ID: 69075 http://www.securityfocus.com/bid/69075 HPdes Security Advisory: HPSBGN03099 http://marc.info/?l=bugtraq&m=140973896703549&w=2 HPdes Security Advisory: HPSBMU03260 http://marc.info/?l=bugtraq&m=142495837901899&w=2 HPdes Security Advisory: HPSBMU03261 http://marc.info/?l=bugtraq&m=143290522027658&w=2 HPdes Security Advisory: HPSBMU03263 http://marc.info/?l=bugtraq&m=143290437727362&w=2 HPdes Security Advisory: HPSBMU03267 http://marc.info/?l=bugtraq&m=142624590206005&w=2 HPdes Security Advisory: HPSBMU03304 http://marc.info/?l=bugtraq&m=142791032306609&w=2 HPdes Security Advisory: SSRT101894 http://secunia.com/advisories/60410 http://secunia.com/advisories/60861 http://secunia.com/advisories/61171 http://secunia.com/advisories/61214 http://secunia.com/advisories/61392 SuSE Security Announcement: SUSE-SU-2015:0578 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html XForce ISS Database: openssl-cve20143508-info-disc(95165) https://exchange.xforce.ibmcloud.com/vulnerabilities/95165 Common Vulnerability Exposure (CVE) ID: CVE-2014-3509 BugTraq ID: 69084 http://www.securityfocus.com/bid/69084 HPdes Security Advisory: HPSBMU03216 http://marc.info/?l=bugtraq&m=142350350616251&w=2 HPdes Security Advisory: SSRT101818 RedHat Security Advisories: RHSA-2015:0197 http://rhn.redhat.com/errata/RHSA-2015-0197.html http://secunia.com/advisories/61139 XForce ISS Database: openssl-cve20143509-dos(95159) https://exchange.xforce.ibmcloud.com/vulnerabilities/95159 Common Vulnerability Exposure (CVE) ID: CVE-2014-3510 BugTraq ID: 69082 http://www.securityfocus.com/bid/69082 http://secunia.com/advisories/61045 XForce ISS Database: openssl-cve20143510-dos(95164) https://exchange.xforce.ibmcloud.com/vulnerabilities/95164 Common Vulnerability Exposure (CVE) ID: CVE-2014-3511 BugTraq ID: 69079 http://www.securityfocus.com/bid/69079 RedHat Security Advisories: RHSA-2015:0126 http://rhn.redhat.com/errata/RHSA-2015-0126.html http://secunia.com/advisories/59887 http://secunia.com/advisories/60377 http://secunia.com/advisories/60810 http://secunia.com/advisories/60890 http://secunia.com/advisories/61043 XForce ISS Database: openssl-cve20143511-sec-bypass(95162) https://exchange.xforce.ibmcloud.com/vulnerabilities/95162
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.