Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.890915
Category:Debian Local Security Checks
Title:Debian: Security Advisory (DLA-915-1)
Summary:The remote host is missing an update for the Debian 'botan1.10' package(s) announced via the DLA-915-1 advisory.
Description:Summary:
The remote host is missing an update for the Debian 'botan1.10' package(s) announced via the DLA-915-1 advisory.

Vulnerability Insight:
A bug in X509 DN string comparisons could result in out of bound reads. This could result in information leakage, denial of service, or potentially incorrect certificate validation results.

For Debian 7 Wheezy, these problems have been fixed in version 1.10.5-1+deb7u3.

We recommend that you upgrade your botan1.10 packages.

Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: [link moved to references]

Affected Software/OS:
'botan1.10' package(s) on Debian 7.

Solution:
Please install the updated package(s).

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2017-2801
BugTraq ID: 98106
http://www.securityfocus.com/bid/98106
Debian Security Information: DSA-3939 (Google Search)
http://www.debian.org/security/2017/dsa-3939
http://talosintelligence.com/vulnerability_reports/TALOS-2017-0294
CopyrightCopyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.