SuSE 10 Security Update : GnuTLS (ZYPP Patch Number 8066)

NASLDB: SuSE 10 Security Update : GnuTLS (ZYPP Patch Number 8066)

General

ID: 59829
Name: SuSE 10 Security Update : GnuTLS (ZYPP Patch Number 8066)

Summary: Checks rpm output for the updated packages

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS Temporal Vector: –

Port: 0
Family: SuSE Local Security Checks
Type: Local

Description

This update of GnuTLS fixes multiple vulnerabilities :

– remote attackers could cause a denial of service (heap
memory corruption and application crash) via an issue in
the asn1_get_length_der() function. (CVE-2012-1569)

– crafted GenericBlockCipher structures allow remote
attackers to cause a denial of service (heap memory
corruption and application crash). (CVE-2012-1573)

– A vulnerability in the DTLS implementation which could
allow remote attackers to recover partial plaintext via
a timing side-channel attack was fixed. (CVE-2012-0390)

Exploiting

Exploit Available: –
Exploitability Ease: –

Sources

CVE: CVE-2012-0390
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: –
Patch Release: 2012/04/12
Plugin Release: 2012/07/03

Plugin

Version: 1.1
Filename: suse_gnutls-8066.nasl
Filesize: 3987 bytes
MD5 Hash: 827a55d7f37d837712f1413d4270f5e5

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list
Dependencies: "ssh_get_info.nasl"

Letzte Plugins

Letzte Plugins

scip AG