 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| Test ID: | 1.3.6.1.4.1.25623.1.0.123094 |
| Category: | Oracle Linux Local Security Checks |
| Title: | Oracle: Security Advisory (ELSA-2015-1154) |
| Summary: | The remote host is missing an update for the 'libreswan' package(s) announced via the ELSA-2015-1154 advisory. |
| Description: | Summary: The remote host is missing an update for the 'libreswan' package(s) announced via the ELSA-2015-1154 advisory. Vulnerability Insight: [3.12-10.1.0.1] - add libreswan-oracle.patch to detect Oracle Linux distro [3.12-10.1] - Resolves: rhbz#1226407 CVE-2015-3204 libreswan: crafted IKE packet causes daemon restart [3.12-10] - Resolves: rhbz#1213652 Support CAVS [updated another prf() free symkey, bogus fips mode fix] [3.12-9] - Resolves: rhbz#1213652 Support CAVS [updated to kill another copy of prf()] - Resolves: rhbz#1208023 Libreswan with IPv6 [updated patch by Jaroslav Aster] - Resolves: rhbz#1208022 libreswan ignores module blacklist [updated modprobe handling] [3.12-8] - Resolves: rhbz#1213652 Support CAVS testing of the PRF/PRF+ functions [3.12-7] - Resolves: rhbz#1208022 libreswan ignores module blacklist rules - Resolves: rhbz#1208023 Libreswan with IPv6 in RHEL7 fails after reboot - Resolves: rhbz#1211146 pluto crashes in fips mode [3.12-6] - Resolves: rhbz#1198650 SELinux context string size limit - Resolves: rhbz#1198649 Add new option for BSI random requirement Affected Software/OS: 'libreswan' package(s) on Oracle Linux 7. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P |
| Cross-Ref: |
Common Vulnerability Exposure (CVE) ID: CVE-2015-3204 75392 http://www.securityfocus.com/bid/75392 GLSA-201603-13 https://security.gentoo.org/glsa/201603-13 RHSA-2015:1154 http://rhn.redhat.com/errata/RHSA-2015-1154.html https://libreswan.org/security/CVE-2015-3204/CVE-2015-3204.txt |
| Copyright | Copyright (C) 2015 Greenbone AG |
| This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |