Test ID:	1.3.6.1.4.1.25623.1.0.878556
Category:	Fedora Local Security Checks
Title:	Fedora: Security Advisory for fastd (FEDORA-2020-01dc2bc62c)
Summary:	The remote host is missing an update for the 'fastd'; package(s) announced via the FEDORA-2020-01dc2bc62c advisory.
Description:	Summary: The remote host is missing an update for the 'fastd' package(s) announced via the FEDORA-2020-01dc2bc62c advisory. Vulnerability Insight: fastd is a secure tunneling daemon with some unique features: - Very small binary (about 100KB on OpenWRT in the default configuration, including all dependencies besides libc) - Exchangeable crypto methods - Transport over UDP for simple usage behind NAT - Can run in 1:1 and 1:n scenarios - There are no server and client roles defined by the protocol, this is just defined by the usage. - Only one instance of the daemon is needed on each host to create a full mesh If no full mesh is established, a routing protocol is necessary to enable hosts that are not connected directly to reach each other Affected Software/OS: 'fastd' package(s) on Fedora 31. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-27638 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSMH65GHKHMJAK2VMPROIPIUS4IA63CW/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2LNSF2LI4RQ7BVGHTJQUJWP7RVGHDTK/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GUZ3AGTAXH7OOP45F5WXBVRQ3IDWUR7M/ https://bugs.debian.org/972521 https://fastd.readthedocs.io/en/stable/releases/v21.html https://github.com/NeoRaider/fastd/commit/737925113363b6130879729cdff9ccc46c33eaea https://lists.debian.org/debian-lts-announce/2020/10/msg00025.html
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.