Test ID:	1.3.6.1.4.1.25623.1.0.71353
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-2475-1)
Summary:	The remote host is missing an update for the Debian 'openssl' package(s) announced via the DSA-2475-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'openssl' package(s) announced via the DSA-2475-1 advisory. Vulnerability Insight: It was discovered that openssl did not correctly handle explicit Initialization Vectors for CBC encryption modes, as used in TLS 1.1, 1.2, and DTLS. An incorrect calculation would lead to an integer underflow and incorrect memory access, causing denial of service (application crash.) For the stable distribution (squeeze), this problem has been fixed in version 0.9.8o-4squeeze13. For the testing distribution (wheezy), and the unstable distribution (sid), this problem has been fixed in version 1.0.1c-1. We recommend that you upgrade your openssl packages. Affected Software/OS: 'openssl' package(s) on Debian 6. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2333 http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html BugTraq ID: 53476 http://www.securityfocus.com/bid/53476 CERT/CC vulnerability note: VU#737740 http://www.kb.cert.org/vuls/id/737740 Debian Security Information: DSA-2475 (Google Search) http://www.debian.org/security/2012/dsa-2475 http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081460.html HPdes Security Advisory: HPSBOV02852 http://marc.info/?l=bugtraq&m=136432043316835&w=2 HPdes Security Advisory: HPSBUX02814 http://marc.info/?l=bugtraq&m=134919053717161&w=2 HPdes Security Advisory: SSRT100930 HPdes Security Advisory: SSRT101108 http://www.mandriva.com/security/advisories?name=MDVSA-2012:073 http://www.cert.fi/en/reports/2012/vulnerability641549.html RedHat Security Advisories: RHSA-2012:0699 http://rhn.redhat.com/errata/RHSA-2012-0699.html RedHat Security Advisories: RHSA-2012:1306 http://rhn.redhat.com/errata/RHSA-2012-1306.html RedHat Security Advisories: RHSA-2012:1307 http://rhn.redhat.com/errata/RHSA-2012-1307.html RedHat Security Advisories: RHSA-2012:1308 http://rhn.redhat.com/errata/RHSA-2012-1308.html http://www.securitytracker.com/id?1027057 http://secunia.com/advisories/49116 http://secunia.com/advisories/49208 http://secunia.com/advisories/49324 http://secunia.com/advisories/50768 http://secunia.com/advisories/51312 SuSE Security Announcement: SUSE-SU-2012:0678 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00019.html SuSE Security Announcement: SUSE-SU-2012:0679 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00020.html XForce ISS Database: openssl-tls-record-dos(75525) https://exchange.xforce.ibmcloud.com/vulnerabilities/75525
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.