Test ID:	1.3.6.1.4.1.25623.1.1.4.2012.0674.1
Category:	SuSE Local Security Checks
Title:	SUSE: Security Advisory (SUSE-SU-2012:0674-1)
Summary:	The remote host is missing an update for the 'openssl' package(s) announced via the SUSE-SU-2012:0674-1 advisory.
Description:	Summary: The remote host is missing an update for the 'openssl' package(s) announced via the SUSE-SU-2012:0674-1 advisory. Vulnerability Insight: This update of openssl fixes the following security issues: * Denial of Service or crash via CBC mode handling. (CVE-2012-2333 > ) * Incorrect integer conversions that could result in memory corruption. (CVE-2012-2110 > , CVE-2012-2131 > ) * Potential memory leak in multithreaded key creation. * Symmetric crypto errors in PKCS7_decrypt. * Free headers after use in error message. * S/MIME verification may erroneously fail. * Tolerating bad MIME headers in ANS.1 parser. (CVE-2012-1165 > , CVE-2006-7250 > ) * DTLS DoS Attack. (CVE-2012-0050 > ) * DTLS Plaintext Recovery Attack. (CVE-2011-4108 > ) * Double-free in Policy Checks. (CVE-2011-4109 > ) * Uninitialized SSL 3.0 Padding. (CVE-2011-4576 > ) * SGC Restart DoS Attack. (CVE-2011-4619 > ) Affected Software/OS: 'openssl' package(s) on SUSE Linux Enterprise Server 10-SP3. Solution: Please install the updated package(s). CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-7250 BugTraq ID: 52181 http://www.securityfocus.com/bid/52181 HPdes Security Advisory: HPSBUX02782 http://marc.info/?l=bugtraq&m=133728068926468&w=2 HPdes Security Advisory: SSRT100844 http://marc.info/?l=openssl-dev&m=115685408414194&w=2 http://www.mail-archive.com/openssl-dev@openssl.org/msg30305.html http://www.openwall.com/lists/oss-security/2012/02/27/10 http://www.openwall.com/lists/oss-security/2012/02/28/14 http://www.redhat.com/support/errata/RHSA-2009-1335.html http://secunia.com/advisories/36533 http://secunia.com/advisories/48153 http://secunia.com/advisories/48516 http://secunia.com/advisories/48899 http://www.ubuntu.com/usn/USN-1424-1 Common Vulnerability Exposure (CVE) ID: CVE-2011-4108 48528 http://secunia.com/advisories/48528 57260 http://secunia.com/advisories/57260 57353 http://secunia.com/advisories/57353 APPLE-SA-2013-06-04-1 http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html DSA-2390 http://www.debian.org/security/2012/dsa-2390 FEDORA-2012-18035 http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html HPSBMU02776 http://marc.info/?l=bugtraq&m=133951357207000&w=2 HPSBMU02786 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 HPSBOV02793 http://marc.info/?l=bugtraq&m=134039053214295&w=2 HPSBUX02734 http://marc.info/?l=bugtraq&m=132750648501816&w=2 MDVSA-2012:006 http://www.mandriva.com/security/advisories?name=MDVSA-2012:006 MDVSA-2012:007 http://www.mandriva.com/security/advisories?name=MDVSA-2012:007 RHSA-2012:1306 http://rhn.redhat.com/errata/RHSA-2012-1306.html RHSA-2012:1307 http://rhn.redhat.com/errata/RHSA-2012-1307.html RHSA-2012:1308 http://rhn.redhat.com/errata/RHSA-2012-1308.html SSRT100729 SSRT100852 SSRT100877 SSRT100891 SUSE-SU-2012:0084 http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html SUSE-SU-2014:0320 http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html VU#737740 http://www.kb.cert.org/vuls/id/737740 http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc http://support.apple.com/kb/HT5784 http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 http://www.isg.rhul.ac.uk/~kp/dtls.pdf http://www.openssl.org/news/secadv_20120104.txt https://security.paloaltonetworks.com/CVE-2011-4108 openSUSE-SU-2012:0083 http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html Common Vulnerability Exposure (CVE) ID: CVE-2011-4109 openssl-policy-checks-dos(72129) https://exchange.xforce.ibmcloud.com/vulnerabilities/72129 Common Vulnerability Exposure (CVE) ID: CVE-2011-4576 55069 http://secunia.com/advisories/55069 Common Vulnerability Exposure (CVE) ID: CVE-2011-4619 HPSBUX02782 SSRT100844 Common Vulnerability Exposure (CVE) ID: CVE-2012-0050 1026548 http://www.securitytracker.com/id?1026548 47631 http://secunia.com/advisories/47631 47677 http://secunia.com/advisories/47677 47755 http://secunia.com/advisories/47755 51563 http://www.securityfocus.com/bid/51563 78320 http://osvdb.org/78320 DSA-2392 http://www.debian.org/security/2012/dsa-2392 HPSBUX02737 http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03169289 MDVSA-2012:011 http://www.mandriva.com/security/advisories?name=MDVSA-2012:011 SSRT100747 http://www.openssl.org/news/secadv_20120118.txt Common Vulnerability Exposure (CVE) ID: CVE-2012-1165 BugTraq ID: 52764 http://www.securityfocus.com/bid/52764 Debian Security Information: DSA-2454 (Google Search) http://www.debian.org/security/2012/dsa-2454 http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077666.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077221.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077086.html HPdes Security Advisory: HPSBMU02786 HPdes Security Advisory: HPSBOV02793 HPdes Security Advisory: SSRT100877 HPdes Security Advisory: SSRT100891 http://www.openwall.com/lists/oss-security/2012/03/12/3 http://www.openwall.com/lists/oss-security/2012/03/12/6 http://www.openwall.com/lists/oss-security/2012/03/12/7 http://www.openwall.com/lists/oss-security/2012/03/13/2 RedHat Security Advisories: RHSA-2012:0426 http://rhn.redhat.com/errata/RHSA-2012-0426.html RedHat Security Advisories: RHSA-2012:0488 http://rhn.redhat.com/errata/RHSA-2012-0488.html RedHat Security Advisories: RHSA-2012:0531 http://rhn.redhat.com/errata/RHSA-2012-0531.html RedHat Security Advisories: RHSA-2012:1306 RedHat Security Advisories: RHSA-2012:1307 RedHat Security Advisories: RHSA-2012:1308 http://www.securitytracker.com/id?1026787 http://secunia.com/advisories/48580 http://secunia.com/advisories/48895 Common Vulnerability Exposure (CVE) ID: CVE-2012-2110 BugTraq ID: 53158 http://www.securityfocus.com/bid/53158 http://www.exploit-db.com/exploits/18756 http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079149.html http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080176.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079299.html http://archives.neohapsis.com/archives/fulldisclosure/2012-04/0209.html HPdes Security Advisory: HPSBMU02776 HPdes Security Advisory: HPSBMU02900 https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862 HPdes Security Advisory: SSRT100852 HPdes Security Advisory: SSRT101210 http://www.mandriva.com/security/advisories?name=MDVSA-2012:060 http://osvdb.org/81223 RedHat Security Advisories: RHSA-2012:0518 http://rhn.redhat.com/errata/RHSA-2012-0518.html RedHat Security Advisories: RHSA-2012:0522 http://rhn.redhat.com/errata/RHSA-2012-0522.html http://www.securitytracker.com/id?1026957 http://secunia.com/advisories/48847 http://secunia.com/advisories/48942 http://secunia.com/advisories/48999 SuSE Security Announcement: SUSE-SU-2012:0623 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00014.html SuSE Security Announcement: SUSE-SU-2012:0637 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00015.html SuSE Security Announcement: SUSE-SU-2012:1149 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00007.html Common Vulnerability Exposure (CVE) ID: CVE-2012-2131 BugTraq ID: 53212 http://www.securityfocus.com/bid/53212 http://www.mandriva.com/security/advisories?name=MDVSA-2012:064 http://www.openwall.com/lists/oss-security/2012/04/24/1 http://secunia.com/advisories/48956 http://www.ubuntu.com/usn/USN-1428-1 XForce ISS Database: openssl-asn1-code-execution(75099) https://exchange.xforce.ibmcloud.com/vulnerabilities/75099 Common Vulnerability Exposure (CVE) ID: CVE-2012-2333 BugTraq ID: 53476 http://www.securityfocus.com/bid/53476 CERT/CC vulnerability note: VU#737740 Debian Security Information: DSA-2475 (Google Search) http://www.debian.org/security/2012/dsa-2475 http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081460.html HPdes Security Advisory: HPSBOV02852 http://marc.info/?l=bugtraq&m=136432043316835&w=2 HPdes Security Advisory: HPSBUX02814 http://marc.info/?l=bugtraq&m=134919053717161&w=2 HPdes Security Advisory: SSRT100930 HPdes Security Advisory: SSRT101108 http://www.mandriva.com/security/advisories?name=MDVSA-2012:073 http://www.cert.fi/en/reports/2012/vulnerability641549.html RedHat Security Advisories: RHSA-2012:0699 http://rhn.redhat.com/errata/RHSA-2012-0699.html http://www.securitytracker.com/id?1027057 http://secunia.com/advisories/49116 http://secunia.com/advisories/49208 http://secunia.com/advisories/49324 http://secunia.com/advisories/50768 http://secunia.com/advisories/51312 SuSE Security Announcement: SUSE-SU-2012:0678 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00019.html SuSE Security Announcement: SUSE-SU-2012:0679 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00020.html XForce ISS Database: openssl-tls-record-dos(75525) https://exchange.xforce.ibmcloud.com/vulnerabilities/75525
Copyright	Copyright (C) 2021 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.