ID de Prueba:	1.3.6.1.4.1.25623.1.0.842825
Categoría:	Ubuntu Local Security Checks
Título:	Ubuntu Update for nss USN-3029-1
Resumen:	The remote host is missing an update for the 'nss'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'nss' package(s) announced via the referenced advisory. Vulnerability Insight: Tyson Smith and Jed Davis discovered that NSS incorrectly handled memory. A remote attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly execute arbitrary code. This update refreshes the NSS package to version 3.23 which includes the latest CA certificate bundle. As a security improvement, this update also modifies NSS behaviour to reject DH key sizes below 1024 bits, preventing a possible downgrade attack. Affected Software/OS: nss on Ubuntu 16.04 LTS, Ubuntu 15.10, Ubuntu 14.04 LTS, Ubuntu 12.04 LTS Solution: Please Install the Updated Packages. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-2834 BugTraq ID: 91072 http://www.securityfocus.com/bid/91072 Debian Security Information: DSA-3688 (Google Search) http://www.debian.org/security/2016/dsa-3688 RedHat Security Advisories: RHSA-2016:2779 http://rhn.redhat.com/errata/RHSA-2016-2779.html http://www.securitytracker.com/id/1036057 SuSE Security Announcement: SUSE-SU-2016:1691 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html SuSE Security Announcement: openSUSE-SU-2016:1552 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html SuSE Security Announcement: openSUSE-SU-2016:1557 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html http://www.ubuntu.com/usn/USN-2993-1 http://www.ubuntu.com/usn/USN-3029-1
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.