Test ID:	1.3.6.1.4.1.25623.1.0.844369
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-4306-1)
Summary:	The remote host is missing an update for the 'dino-im' package(s) announced via the USN-4306-1 advisory.
Description:	Summary: The remote host is missing an update for the 'dino-im' package(s) announced via the USN-4306-1 advisory. Vulnerability Insight: It was discovered that Dino incorrectly validated inputs. An attacker could use this issue to possibly obtain, inject or remove sensitive information. This update also includes a fix to the encryption implementation in Dino to support 12 byte IVs, in addition to 16 byte IVs. Affected Software/OS: 'dino-im' package(s) on Ubuntu 18.04. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-16235 Bugtraq: 20190917 [SECURITY] [DSA 4524-1] dino-im security update (Google Search) https://seclists.org/bugtraq/2019/Sep/31 Debian Security Information: DSA-4524 (Google Search) https://www.debian.org/security/2019/dsa-4524 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WZBNQAOBWTIOKNO4PIYNX624ACGUXSXQ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YUBM7GDZBB6MZZALDWYRAPNV6HJNLNMC/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5TMGQ5Q6QMIFG4NVUWMOWW3GIPGWQZVF/ https://github.com/dino/dino/commit/e84f2c49567e86d2a261ea264d65c4adc549c930 https://gultsch.de/dino_multiple.html http://www.openwall.com/lists/oss-security/2019/09/12/5 https://usn.ubuntu.com/4306-1/ Common Vulnerability Exposure (CVE) ID: CVE-2019-16236 https://github.com/dino/dino/commit/dd33f5f949248d87d34f399e8846d5ee5b8823d9 Common Vulnerability Exposure (CVE) ID: CVE-2019-16237 https://github.com/dino/dino/commit/307f16cc86dd2b95aa02ab8a85110e4a2d5e7363
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.