ID de Prueba:	1.3.6.1.4.1.25623.1.1.13.2015.009.01
Categoría:	Slackware Local Security Checks
Título:	Slackware: Security Advisory (SSA:2015-009-01)
Resumen:	The remote host is missing an update for the 'openssl' package(s) announced via the SSA:2015-009-01 advisory.
Descripción:	Summary: The remote host is missing an update for the 'openssl' package(s) announced via the SSA:2015-009-01 advisory. Vulnerability Insight: New openssl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+ patches/packages/openssl-1.0.1k-i486-1_slack14.1.txz: Upgraded. This update fixes several security issues: DTLS segmentation fault in dtls1_get_record (CVE-2014-3571) DTLS memory leak in dtls1_buffer_record (CVE-2015-0206) no-ssl3 configuration sets method to NULL (CVE-2014-3569) ECDHE silently downgrades to ECDH [Client] (CVE-2014-3572) RSA silently downgrades to EXPORT_RSA [Client] (CVE-2015-0204) DH client certificates accepted without verification [Server] (CVE-2015-0205) Certificate fingerprints can be modified (CVE-2014-8275) Bignum squaring may produce incorrect results (CVE-2014-3570) For more information, see: [links moved to references] (* Security fix *) patches/packages/openssl-solibs-1.0.1k-i486-1_slack14.1.txz: Upgraded. +--------------------------+ Affected Software/OS: 'openssl' package(s) on Slackware 13.0, Slackware 13.1, Slackware 13.37, Slackware 14.0, Slackware 14.1, Slackware current. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3569 http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html BugTraq ID: 71934 http://www.securityfocus.com/bid/71934 Cisco Security Advisory: 20150310 Multiple Vulnerabilities in OpenSSL (January 2015) Affecting Cisco Products http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl Debian Security Information: DSA-3125 (Google Search) http://www.debian.org/security/2015/dsa-3125 HPdes Security Advisory: HPSBHF03289 http://marc.info/?l=bugtraq&m=142721102728110&w=2 HPdes Security Advisory: HPSBMU03380 http://marc.info/?l=bugtraq&m=143748090628601&w=2 HPdes Security Advisory: HPSBMU03396 http://marc.info/?l=bugtraq&m=144050205101530&w=2 HPdes Security Advisory: HPSBMU03397 http://marc.info/?l=bugtraq&m=144050297101809&w=2 HPdes Security Advisory: HPSBMU03409 http://marc.info/?l=bugtraq&m=144050155601375&w=2 HPdes Security Advisory: HPSBMU03413 http://marc.info/?l=bugtraq&m=144050254401665&w=2 HPdes Security Advisory: HPSBOV03318 http://marc.info/?l=bugtraq&m=142895206924048&w=2 HPdes Security Advisory: HPSBUX03162 http://marc.info/?l=bugtraq&m=142496179803395&w=2 HPdes Security Advisory: HPSBUX03244 http://marc.info/?l=bugtraq&m=142496289803847&w=2 HPdes Security Advisory: SSRT101885 http://www.mandriva.com/security/advisories?name=MDVSA-2015:019 http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 http://www.securitytracker.com/id/1033378 SuSE Security Announcement: SUSE-SU-2015:0946 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html SuSE Security Announcement: openSUSE-SU-2015:0130 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html SuSE Security Announcement: openSUSE-SU-2016:0640 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html Common Vulnerability Exposure (CVE) ID: CVE-2014-3570 BugTraq ID: 71939 http://www.securityfocus.com/bid/71939 http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147938.html http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148363.html HPdes Security Advisory: HPSBGN03299 http://marc.info/?l=bugtraq&m=142720981827617&w=2 HPdes Security Advisory: SSRT101987 RedHat Security Advisories: RHSA-2015:0066 http://rhn.redhat.com/errata/RHSA-2015-0066.html RedHat Security Advisories: RHSA-2015:0849 http://rhn.redhat.com/errata/RHSA-2015-0849.html RedHat Security Advisories: RHSA-2016:1650 http://rhn.redhat.com/errata/RHSA-2016-1650.html SuSE Security Announcement: SUSE-SU-2015:0578 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html SuSE Security Announcement: openSUSE-SU-2015:1277 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html Common Vulnerability Exposure (CVE) ID: CVE-2014-3571 BugTraq ID: 71937 http://www.securityfocus.com/bid/71937 Common Vulnerability Exposure (CVE) ID: CVE-2014-3572 BugTraq ID: 71942 http://www.securityfocus.com/bid/71942 Common Vulnerability Exposure (CVE) ID: CVE-2014-8275 BugTraq ID: 71935 http://www.securityfocus.com/bid/71935 RedHat Security Advisories: RHSA-2015:0800 http://rhn.redhat.com/errata/RHSA-2015-0800.html Common Vulnerability Exposure (CVE) ID: CVE-2015-0204 BugTraq ID: 71936 http://www.securityfocus.com/bid/71936 BugTraq ID: 91787 http://www.securityfocus.com/bid/91787 https://security.gentoo.org/glsa/201503-11 HPdes Security Advisory: HPSBMU03345 http://marc.info/?l=bugtraq&m=144043644216842&w=2 HPdes Security Advisory: HPSBUX03334 http://marc.info/?l=bugtraq&m=143213830203296&w=2 HPdes Security Advisory: SSRT102000 http://www.mandriva.com/security/advisories?name=MDVSA-2015:063 https://freakattack.com/ SuSE Security Announcement: SUSE-SU-2015:1085 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html SuSE Security Announcement: SUSE-SU-2015:1086 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html SuSE Security Announcement: SUSE-SU-2015:1138 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html SuSE Security Announcement: SUSE-SU-2015:1161 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html SuSE Security Announcement: SUSE-SU-2015:2166 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html SuSE Security Announcement: SUSE-SU-2015:2168 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html SuSE Security Announcement: SUSE-SU-2015:2182 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html SuSE Security Announcement: SUSE-SU-2015:2192 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html SuSE Security Announcement: SUSE-SU-2015:2216 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html SuSE Security Announcement: SUSE-SU-2016:0113 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html XForce ISS Database: openssl-cve20150204-weak-security(99707) https://exchange.xforce.ibmcloud.com/vulnerabilities/99707 Common Vulnerability Exposure (CVE) ID: CVE-2015-0205 BugTraq ID: 71941 http://www.securityfocus.com/bid/71941 XForce ISS Database: openssl-cve20150205-sec-bypass(99708) https://exchange.xforce.ibmcloud.com/vulnerabilities/99708 Common Vulnerability Exposure (CVE) ID: CVE-2015-0206 BugTraq ID: 71940 http://www.securityfocus.com/bid/71940 XForce ISS Database: openssl-cve20150206-dos(99704) https://exchange.xforce.ibmcloud.com/vulnerabilities/99704
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.