Updates openssl package to version 1.0.1k-10.fc22 addressing multiple moderate and low impact security issues
Reporter | Title | Published | Views | Family All 199 |
---|---|---|---|---|
![]() | Fedora 21 : openssl-1.0.1k-10.fc21 (2015-10108) | 25 Jun 201500:00 | – | nessus |
![]() | OpenSSL 1.0.0 < 1.0.0s Multiple Vulnerabilities | 12 Jun 201500:00 | – | nessus |
![]() | OpenSSL 0.9.8 < 0.9.8zg Multiple Vulnerabilities | 12 Jun 201500:00 | – | nessus |
![]() | Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : openssl (SSA:2015-162-01) | 12 Jun 201500:00 | – | nessus |
![]() | OpenSSL 0.9.8 < 0.9.8zg / 1.0.0 < 1.0.0s Multiple Vulnerabilities | 22 Jun 201500:00 | – | nessus |
![]() | OpenSSL 1.0.1 < 1.0.1n Multiple Vulnerabilities | 12 Jun 201500:00 | – | nessus |
![]() | OpenSSL 1.0.2 < 1.0.2b Multiple Vulnerabilities | 12 Jun 201500:00 | – | nessus |
![]() | Scientific Linux Security Update : openssl on SL6.x, SL7.x i386/x86_64 (20150615) | 17 Jun 201500:00 | – | nessus |
![]() | Debian DLA-247-1 : openssl security update (Logjam) | 18 Jun 201500:00 | – | nessus |
![]() | OpenSSL 1.0.1 < 1.0.1n / 1.0.2 < 1.0.2b Multiple Vulnerabilities (Logjam) | 22 Jun 201500:00 | – | nessus |
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Fedora Security Advisory 2015-10047.
#
include('deprecated_nasl_level.inc');
include('compat.inc');
if (description)
{
script_id(84301);
script_version("2.8");
script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/11");
script_cve_id("CVE-2015-1789", "CVE-2015-1790", "CVE-2015-1791", "CVE-2015-1792");
script_xref(name:"FEDORA", value:"2015-10047");
script_name(english:"Fedora 22 : openssl-1.0.1k-10.fc22 (2015-10047)");
script_summary(english:"Checks rpm output for the updated package.");
script_set_attribute(
attribute:"synopsis",
value:"The remote Fedora host is missing a security update."
);
script_set_attribute(
attribute:"description",
value:
"Multiple moderate and low impact security issues fixed.
Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.redhat.com/show_bug.cgi?id=1228603"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.redhat.com/show_bug.cgi?id=1228604"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.redhat.com/show_bug.cgi?id=1228607"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.redhat.com/show_bug.cgi?id=1228608"
);
# https://lists.fedoraproject.org/pipermail/package-announce/2015-June/160436.html
script_set_attribute(
attribute:"see_also",
value:"http://www.nessus.org/u?0f4a99cd"
);
script_set_attribute(
attribute:"solution",
value:"Update the affected openssl package."
);
script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:openssl");
script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:22");
script_set_attribute(attribute:"patch_publication_date", value:"2015/06/16");
script_set_attribute(attribute:"plugin_publication_date", value:"2015/06/22");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2015-2021 Tenable Network Security, Inc.");
script_family(english:"Fedora Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = eregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! ereg(pattern:"^22([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 22.x", "Fedora " + os_ver);
if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);
flag = 0;
if (rpm_check(release:"FC22", reference:"openssl-1.0.1k-10.fc22")) flag++;
if (flag)
{
if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
else security_warning(0);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "openssl");
}
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo