ID de Prueba:	1.3.6.1.4.1.25623.1.0.703136
Categoría:	Debian Local Security Checks
Título:	Debian Security Advisory DSA 3136-1 (polarssl - security update)
Resumen:	A vulnerability was discovered in;PolarSSL, a lightweight crypto and SSL/TLS library. A remote attacker could;exploit this flaw using specially crafted certificates to mount a denial of;service against an application linked against the library (application crash), or;potentially, to execute arbitrary code.
Descripción:	Summary: A vulnerability was discovered in PolarSSL, a lightweight crypto and SSL/TLS library. A remote attacker could exploit this flaw using specially crafted certificates to mount a denial of service against an application linked against the library (application crash), or potentially, to execute arbitrary code. Affected Software/OS: polarssl on Debian Linux Solution: For the stable distribution (wheezy), this problem has been fixed in version 1.2.9-1~ deb7u5. For the upcoming stable distribution (jessie) and the unstable distribution (sid), this problem will be fixed soon. We recommend that you upgrade your polarssl packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1182 Debian Security Information: DSA-3136 (Google Search) http://www.debian.org/security/2015/dsa-3136 http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148829.html http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148903.html https://security.gentoo.org/glsa/201801-15 http://secunia.com/advisories/62270 http://secunia.com/advisories/62610 SuSE Security Announcement: openSUSE-SU-2015:0186 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-02/msg00003.html
Copyright	Copyright (c) 2015 Greenbone Networks GmbH http://greenbone.net

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.