ID de Prueba:	1.3.6.1.4.1.25623.1.0.702837
Categoría:	Debian Local Security Checks
Título:	Debian Security Advisory DSA 2837-1 (openssl - programming error)
Resumen:	Anton Johansson discovered that an invalid TLS handshake package could;crash OpenSSL with a NULL pointer dereference.;;The oldstable distribution (squeeze) is not affected.
Descripción:	Summary: Anton Johansson discovered that an invalid TLS handshake package could crash OpenSSL with a NULL pointer dereference. The oldstable distribution (squeeze) is not affected. Affected Software/OS: openssl on Debian Linux Solution: For the stable distribution (wheezy), this problem has been fixed in version 1.0.1e-2+deb7u3. For the unstable distribution (sid), this problem has been fixed in version 1.0.1f-1. We recommend that you upgrade your openssl packages. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4353 Debian Security Information: DSA-2837 (Google Search) http://www.debian.org/security/2014/dsa-2837 http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html RedHat Security Advisories: RHSA-2014:0015 http://rhn.redhat.com/errata/RHSA-2014-0015.html RedHat Security Advisories: RHSA-2014:0041 http://rhn.redhat.com/errata/RHSA-2014-0041.html SuSE Security Announcement: openSUSE-SU-2014:0094 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-01/msg00065.html SuSE Security Announcement: openSUSE-SU-2014:0096 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-01/msg00067.html SuSE Security Announcement: openSUSE-SU-2014:0099 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-01/msg00070.html http://www.ubuntu.com/usn/USN-2079-1
Copyright	Copyright (c) 2014 Greenbone Networks GmbH http://greenbone.net

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.