ID de Prueba:	1.3.6.1.4.1.25623.1.0.107270
Categoría:	Buffer overflow
Título:	OpenSSL Overflow Vulnerability (20171207, 20180327) - Windows
Resumen:	OpenSSL is prone to an overflow bug.
Descripción:	Summary: OpenSSL is prone to an overflow bug. Vulnerability Insight: The overflow bug is in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. Vulnerability Impact: Successfully exploiting this issue would allow an attacker to derive information about the private key. Affected Software/OS: OpenSSL 1.0.2 before 1.0.2n. OpenSSL 1.1.0 before 1.1.0h. NOTE: This issue only affects 64-bit installations. Solution: Update to version 1.0.2n, 1.1.0h or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-3738 BugTraq ID: 102118 http://www.securityfocus.com/bid/102118 Debian Security Information: DSA-4065 (Google Search) https://www.debian.org/security/2017/dsa-4065 Debian Security Information: DSA-4157 (Google Search) https://www.debian.org/security/2018/dsa-4157 FreeBSD Security Advisory: FreeBSD-SA-17:12 https://security.FreeBSD.org/advisories/FreeBSD-SA-17:12.openssl.asc https://security.gentoo.org/glsa/201712-03 https://github.com/openssl/openssl/commit/e502cc86df9dafded1694fceb3228ee34d11c11a https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html RedHat Security Advisories: RHSA-2018:0998 https://access.redhat.com/errata/RHSA-2018:0998 RedHat Security Advisories: RHSA-2018:2185 https://access.redhat.com/errata/RHSA-2018:2185 RedHat Security Advisories: RHSA-2018:2186 https://access.redhat.com/errata/RHSA-2018:2186 RedHat Security Advisories: RHSA-2018:2187 https://access.redhat.com/errata/RHSA-2018:2187 http://www.securitytracker.com/id/1039978
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.