Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2024.0031
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2024-0031)
Zusammenfassung:	The remote host is missing an update for the 'gnutls' package(s) announced via the MGASA-2024-0031 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'gnutls' package(s) announced via the MGASA-2024-0031 advisory. Vulnerability Insight: The updated packages fix security vulnerabilities: A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack. (CVE-2024-0567) A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange, potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete resolution for CVE-2023-5981. (CVE-2024-0553) Affected Software/OS: 'gnutls' package(s) on Mageia 9. Solution: Please install the updated package(s). CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2024-0553 RHBZ#2258412 https://bugzilla.redhat.com/show_bug.cgi?id=2258412 RHSA-2024:0533 https://access.redhat.com/errata/RHSA-2024:0533 RHSA-2024:0627 https://access.redhat.com/errata/RHSA-2024:0627 RHSA-2024:0796 https://access.redhat.com/errata/RHSA-2024:0796 RHSA-2024:1082 https://access.redhat.com/errata/RHSA-2024:1082 RHSA-2024:1108 https://access.redhat.com/errata/RHSA-2024:1108 http://www.openwall.com/lists/oss-security/2024/01/19/3 https://access.redhat.com/security/cve/CVE-2024-0553 https://gitlab.com/gnutls/gnutls/-/issues/1522 https://lists.debian.org/debian-lts-announce/2024/02/msg00010.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/ https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html https://security.netapp.com/advisory/ntap-20240202-0011/ Common Vulnerability Exposure (CVE) ID: CVE-2024-0567 RHBZ#2258544 https://bugzilla.redhat.com/show_bug.cgi?id=2258544 https://access.redhat.com/security/cve/CVE-2024-0567 https://gitlab.com/gnutls/gnutls/-/issues/1521
Copyright	Copyright (C) 2024 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.