ID de Prueba:	1.3.6.1.4.1.25623.1.0.704355
Categoría:	Debian Local Security Checks
Título:	Debian Security Advisory DSA 4355-1 (openssl1.0 - security update)
Resumen:	Several local side channel attacks and a denial of service via large;Diffie-Hellman parameters were discovered in OpenSSL, a Secure Sockets;Layer toolkit.
Descripción:	Summary: Several local side channel attacks and a denial of service via large Diffie-Hellman parameters were discovered in OpenSSL, a Secure Sockets Layer toolkit. Affected Software/OS: openssl1.0 on Debian Linux Solution: For the stable distribution (stretch), these problems have been fixed in version 1.0.2q-1~ deb9u1. Going forward, openssl1.0 security updates for stretch will be based on the 1.0.2x upstream releases. We recommend that you upgrade your openssl1.0 packages. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2018-0732 BugTraq ID: 104442 http://www.securityfocus.com/bid/104442 http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3984ef0b72831da8b3ece4745cac4f8575b19098 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ea7abeeabf92b7aca160bdd0208636d4da69f4f4 https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/ https://security.netapp.com/advisory/ntap-20181105-0001/ https://security.netapp.com/advisory/ntap-20190118-0002/ https://securityadvisories.paloaltonetworks.com/Home/Detail/133 https://www.openssl.org/news/secadv/20180612.txt https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html https://www.tenable.com/security/tns-2018-12 https://www.tenable.com/security/tns-2018-13 https://www.tenable.com/security/tns-2018-14 https://www.tenable.com/security/tns-2018-17 Debian Security Information: DSA-4348 (Google Search) https://www.debian.org/security/2018/dsa-4348 Debian Security Information: DSA-4355 (Google Search) https://www.debian.org/security/2018/dsa-4355 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/ https://security.gentoo.org/glsa/201811-03 https://www.oracle.com/security-alerts/cpuapr2020.html https://www.oracle.com/security-alerts/cpujan2021.html https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html https://lists.debian.org/debian-lts-announce/2018/07/msg00043.html RedHat Security Advisories: RHSA-2018:2552 https://access.redhat.com/errata/RHSA-2018:2552 RedHat Security Advisories: RHSA-2018:2553 https://access.redhat.com/errata/RHSA-2018:2553 RedHat Security Advisories: RHSA-2018:3221 https://access.redhat.com/errata/RHSA-2018:3221 RedHat Security Advisories: RHSA-2018:3505 https://access.redhat.com/errata/RHSA-2018:3505 RedHat Security Advisories: RHSA-2019:1296 https://access.redhat.com/errata/RHSA-2019:1296 RedHat Security Advisories: RHSA-2019:1297 https://access.redhat.com/errata/RHSA-2019:1297 RedHat Security Advisories: RHSA-2019:1543 https://access.redhat.com/errata/RHSA-2019:1543 http://www.securitytracker.com/id/1041090 https://usn.ubuntu.com/3692-1/ https://usn.ubuntu.com/3692-2/ Common Vulnerability Exposure (CVE) ID: CVE-2018-0734 BugTraq ID: 105758 http://www.securityfocus.com/bid/105758 https://www.oracle.com/security-alerts/cpujan2020.html RedHat Security Advisories: RHSA-2019:2304 https://access.redhat.com/errata/RHSA-2019:2304 RedHat Security Advisories: RHSA-2019:3700 https://access.redhat.com/errata/RHSA-2019:3700 RedHat Security Advisories: RHSA-2019:3932 https://access.redhat.com/errata/RHSA-2019:3932 RedHat Security Advisories: RHSA-2019:3933 https://access.redhat.com/errata/RHSA-2019:3933 RedHat Security Advisories: RHSA-2019:3935 https://access.redhat.com/errata/RHSA-2019:3935 SuSE Security Announcement: openSUSE-SU-2019:1547 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html SuSE Security Announcement: openSUSE-SU-2019:1814 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html https://usn.ubuntu.com/3840-1/ Common Vulnerability Exposure (CVE) ID: CVE-2018-0737 BugTraq ID: 103766 http://www.securityfocus.com/bid/103766 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=349a41da1ad88ad87825414752a8ff5fdd6a6c3f https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6939eab03a6e23d2bd2c3f5e34fe1d48e542e787 https://security.netapp.com/advisory/ntap-20180726-0003/ https://www.openssl.org/news/secadv/20180416.txt https://security.gentoo.org/glsa/201811-21 https://www.oracle.com//security-alerts/cpujul2021.html http://www.securitytracker.com/id/1040685 https://usn.ubuntu.com/3628-1/ https://usn.ubuntu.com/3628-2/ Common Vulnerability Exposure (CVE) ID: CVE-2018-5407 BugTraq ID: 105897 http://www.securityfocus.com/bid/105897 https://www.exploit-db.com/exploits/45785/ https://security.gentoo.org/glsa/201903-10 https://eprint.iacr.org/2018/1060.pdf https://github.com/bbbrumley/portsmash https://lists.debian.org/debian-lts-announce/2018/11/msg00024.html RedHat Security Advisories: RHSA-2019:0483 https://access.redhat.com/errata/RHSA-2019:0483 RedHat Security Advisories: RHSA-2019:0651 https://access.redhat.com/errata/RHSA-2019:0651 RedHat Security Advisories: RHSA-2019:0652 https://access.redhat.com/errata/RHSA-2019:0652 RedHat Security Advisories: RHSA-2019:2125 https://access.redhat.com/errata/RHSA-2019:2125 RedHat Security Advisories: RHSA-2019:3929 https://access.redhat.com/errata/RHSA-2019:3929 RedHat Security Advisories: RHSA-2019:3931 https://access.redhat.com/errata/RHSA-2019:3931
Copyright	Copyright (C) 2018 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.