ID de Prueba:	1.3.6.1.4.1.25623.1.0.107056
Categoría:	Denial of Service
Título:	OpenSSL Missing CRL sanity check Vulnerability - Linux
Resumen:	OpenSSL is prone to a Denial of Service (DoS) vulnerability.
Descripción:	Summary: OpenSSL is prone to a Denial of Service (DoS) vulnerability. Vulnerability Insight: OpenSSL suffers from the possibility of DoS attack after a bug fix added to OpenSSL 1.1.0 but was omitted from OpenSSL 1.0.2i causing a null pointer exception when using CRLs in OpenSSL 1.0.2i. Vulnerability Impact: Successful exploitation could result an in service crash. Affected Software/OS: OpenSSL 1.0.2i. Solution: OpenSSL 1.0.2i users should upgrade to 1.0.2j. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-7052 BugTraq ID: 93171 http://www.securityfocus.com/bid/93171 FreeBSD Security Advisory: FreeBSD-SA-16:27 https://security.FreeBSD.org/advisories/FreeBSD-SA-16:27.openssl.asc https://security.gentoo.org/glsa/201612-16 http://www.securitytracker.com/id/1036885 SuSE Security Announcement: SUSE-SU-2016:2470 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.