SuSE 10 Security Update : openssl (ZYPP Patch Number 8143)

NASLDB: SuSE 10 Security Update : openssl (ZYPP Patch Number 8143)

General

ID: 59316
Name: SuSE 10 Security Update : openssl (ZYPP Patch Number 8143)

Summary: Checks rpm output for the updated packages

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS Temporal Vector: –

Port: 0
Family: SuSE Local Security Checks
Type: Local

Description

This update of openssl fixes the following denial of service
vulnerabilities :

– Denial of Service via CBC mode handling. (CVE-2012-2333)

– A deadlock condition introduced by the previous memory
leak fix due to entering a lock twice. This would only
happen in multithreaded programs.

In addition, openssl’s cms subcommand (Crypthographic Message Syntax)
has been enabled.

Exploiting

Exploit Available: –
Exploitability Ease: –

Sources

CVE: CVE-2012-2333
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: –
Patch Release: 2012/05/24
Plugin Release: 2012/05/31

Plugin

Version: 1.1
Filename: suse_openssl-8143.nasl
Filesize: 3607 bytes
MD5 Hash: a03338474200fd072c8583791b0c6b77

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list
Dependencies: "ssh_get_info.nasl"

Letzte Plugins

Letzte Plugins

scip AG