Test Kennung:	1.3.6.1.4.1.25623.1.0.107269
Kategorie:	Buffer overflow
Titel:	OpenSSL Overflow Vulnerability (20171207, 20180327) - Linux
Zusammenfassung:	OpenSSL is prone to an overflow bug.
Beschreibung:	Summary: OpenSSL is prone to an overflow bug. Vulnerability Insight: The overflow bug is in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. Vulnerability Impact: Successfully exploiting this issue would allow an attacker to derive information about the private key. Affected Software/OS: OpenSSL 1.0.2 before 1.0.2n. OpenSSL 1.1.0 before 1.1.0h. NOTE: This issue only affects 64-bit installations. Solution: Update to version 1.0.2n, 1.1.0h or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-3738 BugTraq ID: 102118 http://www.securityfocus.com/bid/102118 Debian Security Information: DSA-4065 (Google Search) https://www.debian.org/security/2017/dsa-4065 Debian Security Information: DSA-4157 (Google Search) https://www.debian.org/security/2018/dsa-4157 FreeBSD Security Advisory: FreeBSD-SA-17:12 https://security.FreeBSD.org/advisories/FreeBSD-SA-17:12.openssl.asc https://security.gentoo.org/glsa/201712-03 https://github.com/openssl/openssl/commit/e502cc86df9dafded1694fceb3228ee34d11c11a https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html RedHat Security Advisories: RHSA-2018:0998 https://access.redhat.com/errata/RHSA-2018:0998 RedHat Security Advisories: RHSA-2018:2185 https://access.redhat.com/errata/RHSA-2018:2185 RedHat Security Advisories: RHSA-2018:2186 https://access.redhat.com/errata/RHSA-2018:2186 RedHat Security Advisories: RHSA-2018:2187 https://access.redhat.com/errata/RHSA-2018:2187 http://www.securitytracker.com/id/1039978
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.