Test ID:	1.3.6.1.4.1.25623.1.0.833231
Category:	SuSE Local Security Checks
Title:	openSUSE: Security Advisory for openssl (SUSE-SU-2023:2962-1)
Summary:	The remote host is missing an update for the 'openssl'; package(s) announced via the SUSE-SU-2023:2962-1 advisory.
Description:	Summary: The remote host is missing an update for the 'openssl' package(s) announced via the SUSE-SU-2023:2962-1 advisory. Vulnerability Insight: This update for openssl-1_1 fixes the following issues: * CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487). ## Affected Software/OS: 'openssl' package(s) on openSUSE Leap 15.4, openSUSE Leap Micro 5.3, openSUSE Leap Micro 5.4. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-3446 https://security.gentoo.org/glsa/202402-08 1.0.2zi patch (premium) https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c 1.1.1v git commit https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528 3.0.10 git commit https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb 3.1.2 git commit https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23 OpenSSL Advisory https://www.openssl.org/news/secadv/20230719.txt https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html http://www.openwall.com/lists/oss-security/2023/07/19/4 http://www.openwall.com/lists/oss-security/2023/07/19/5 http://www.openwall.com/lists/oss-security/2023/07/19/6 http://www.openwall.com/lists/oss-security/2023/07/31/1 http://www.openwall.com/lists/oss-security/2024/05/16/1
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.