Test ID:	1.3.6.1.4.1.25623.1.1.2.2023.2774
Category:	Huawei EulerOS Local Security Checks
Title:	Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2023-2774)
Summary:	The remote host is missing an update for the Huawei EulerOS 'shim' package(s) announced via the EulerOS-SA-2023-2774 advisory.
Description:	Summary: The remote host is missing an update for the Huawei EulerOS 'shim' package(s) announced via the EulerOS-SA-2023-2774 advisory. Vulnerability Insight: Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks. Invalid certificate policies in leaf certificates are silently ignored by OpenSSL and other certificate policy checks are skipped for that certificate. A malicious CA could use this to deliberately assert invalid certificate policies in order to circumvent policy checking on the certificate altogether. Policy processing is disabled by default but can be enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function.(CVE-2023-0465) Affected Software/OS: 'shim' package(s) on Huawei EulerOS Virtualization release 2.11.0. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-0465 Debian Security Information: DSA-5417 (Google Search) https://www.debian.org/security/2023/dsa-5417 https://security.gentoo.org/glsa/202402-08 1.0.2zh patch (premium) https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a 1.1.1u git commit https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95 3.0.9 git commit https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb 3.1.1 git commit https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c OpenSSL Advisory https://www.openssl.org/news/secadv/20230328.txt https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.