Test Kennung:	1.3.6.1.4.1.25623.1.0.140037
Kategorie:	F5 Local Security Checks
Titel:	F5 BIG-IP - OpenSSL vulnerability CVE-2016-2181
Zusammenfassung:	The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0; mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote; attackers to cause a denial of service (false-positive packet drops) via spoofed DTLS records, related to; rec_layer_d1.c and ssl3_record.c.
Beschreibung:	Summary: The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service (false-positive packet drops) via spoofed DTLS records, related to rec_layer_d1.c and ssl3_record.c. Solution: See the referenced vendor advisory for a solution. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2016-2181 BugTraq ID: 92982 http://www.securityfocus.com/bid/92982 FreeBSD Security Advisory: FreeBSD-SA-16:26 https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc RedHat Security Advisories: RHSA-2016:1940 http://rhn.redhat.com/errata/RHSA-2016-1940.html http://www.securitytracker.com/id/1036690
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.