Test Kennung:	1.3.6.1.4.1.25623.1.0.703829
Kategorie:	Debian Local Security Checks
Titel:	Debian Security Advisory DSA 3829-1 (bouncycastle - security update)
Zusammenfassung:	Quan Nguyen discovered that a missing boundary check in the;Galois/Counter mode implementation of Bouncy Castle (a Java;implementation of cryptographic algorithms) may result in information;disclosure.
Beschreibung:	Summary: Quan Nguyen discovered that a missing boundary check in the Galois/Counter mode implementation of Bouncy Castle (a Java implementation of cryptographic algorithms) may result in information disclosure. Affected Software/OS: bouncycastle on Debian Linux Solution: For the stable distribution (jessie), this problem has been fixed in version 1.49+dfsg-3+deb8u2. For the upcoming stable distribution (stretch), this problem has been fixed in version 1.54-1. For the unstable distribution (sid), this problem has been fixed in version 1.54-1. We recommend that you upgrade your bouncycastle packages. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-6644 BugTraq ID: 79865 http://www.securityfocus.com/bid/79865 Debian Security Information: DSA-3829 (Google Search) http://www.debian.org/security/2017/dsa-3829 RedHat Security Advisories: RHSA-2017:1832 https://access.redhat.com/errata/RHSA-2017:1832 RedHat Security Advisories: RHSA-2017:2808 https://access.redhat.com/errata/RHSA-2017:2808 RedHat Security Advisories: RHSA-2017:2809 https://access.redhat.com/errata/RHSA-2017:2809 RedHat Security Advisories: RHSA-2017:2810 https://access.redhat.com/errata/RHSA-2017:2810 RedHat Security Advisories: RHSA-2017:2811 https://access.redhat.com/errata/RHSA-2017:2811 RedHat Security Advisories: RHSA-2018:2927 https://access.redhat.com/errata/RHSA-2018:2927 http://www.securitytracker.com/id/1034592 https://usn.ubuntu.com/3727-1/
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.