Updated gnutls packages that fix three security issues are now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The GnuTLS library provides support for cryptographic algorithms and for protocols such as Transport Layer Security (TLS). GnuTLS includes libtasn1, a library developed for ASN.1 (Abstract Syntax Notation One) structures management that includes DER (Distinguished Encoding Rules) encoding and decoding.

A flaw was found in the way GnuTLS decrypted malformed TLS records.
This could cause a TLS/SSL client or server to crash when processing a specially crafted TLS record from a remote TLS/SSL connection peer.
(CVE-2012-1573)

A flaw was found in the way libtasn1 decoded DER data. An attacker could create a carefully-crafted X.509 certificate that, when parsed by an application that uses GnuTLS, could cause the application to crash. (CVE-2012-1569)

A boundary error was found in the gnutls_session_get_data() function.
A malicious TLS/SSL server could use this flaw to crash a TLS/SSL client or, possibly, execute arbitrary code as the client, if the client passed a fixed-sized buffer to gnutls_session_get_data() before checking the real size of the session data provided by the server.
(CVE-2011-4128)

Red Hat would like to thank Matthew Hall of Mu Dynamics for reporting CVE-2012-1573 and CVE-2012-1569.

Users of GnuTLS are advised to upgrade to these updated packages, which contain backported patches to correct these issues. For the update to take effect, all applications linked to the GnuTLS library must be restarted, or the system rebooted.

The GnuTLS library provides support for cryptographic algorithms and for protocols such as Transport Layer Security (TLS).

A flaw was found in the way GnuTLS decrypted malformed TLS records.
This could cause a TLS/SSL client or server to crash when processing a specially crafted TLS record from a remote TLS/SSL connection peer.
(CVE-2012-1573)

A boundary error was found in the gnutls_session_get_data() function.
A malicious TLS/SSL server could use this flaw to crash a TLS/SSL client or, possibly, execute arbitrary code as the client, if the client passed a fixed-sized buffer to gnutls_session_get_data() before checking the real size of the session data provided by the server.
(CVE-2011-4128)

Users of GnuTLS are advised to upgrade to these updated packages, which contain backported patches to correct these issues. For the update to take effect, all applications linked to the GnuTLS library must be restarted, or the system rebooted.

This update of GnuTLS fixes multiple vulnerabilities :

  - remote attackers could cause a denial of service (heap     memory corruption and application crash) via an issue in     the asn1_get_length_der() function. (CVE-2012-1569)

  - crafted GenericBlockCipher structures allow remote     attackers to cause a denial of service (heap memory     corruption and application crash). (CVE-2012-1573)

  - A vulnerability in the DTLS implementation which could     allow remote attackers to recover partial plaintext via     a timing side-channel attack was fixed. (CVE-2012-0390)

An updated rhev-hypervisor5 package that fixes three security issues and one bug is now available.

The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The rhev-hypervisor5 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor is a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes everything necessary to run and manage virtual machines: A subset of the Red Hat Enterprise Linux operating environment and the Red Hat Enterprise Virtualization Agent.

Note: Red Hat Enterprise Virtualization Hypervisor is only available for the Intel 64 and AMD64 architectures with virtualization extensions.

A flaw was found in the way libtasn1 decoded DER data. An attacker could create a carefully-crafted X.509 certificate that, when parsed by an application that uses GnuTLS, could cause the application to crash. (CVE-2012-1569)

A flaw was found in the way GnuTLS decrypted malformed TLS records.
This could cause a TLS/SSL client or server to crash when processing a specially crafted TLS record from a remote TLS/SSL connection peer.
(CVE-2012-1573)

An integer overflow flaw was found in the implementation of the printf functions family. This could allow an attacker to bypass FORTIFY_SOURCE protections and execute arbitrary code using a format string flaw in an application, even though these protections are expected to limit the impact of such flaws to an application abort.
(CVE-2012-0864)

Red Hat would like to thank Matthew Hall of Mu Dynamics for reporting CVE-2012-1569 and CVE-2012-1573.

This updated package provides updated components that include fixes for various security issues. These issues have no security impact on Red Hat Enterprise Virtualization Hypervisor itself, however. The security fixes included in this update address the following CVE numbers :

CVE-2011-4128 (gnutls issue)

CVE-2012-1583 (kernel issue)

CVE-2011-3045 (libpng issue)

CVE-2012-0884 and CVE-2012-1165 (openssl issues)

Further information on the changes made to the package is available on the relevant errata :

https://rhn.redhat.com/errata/RHBA-2012-0398.html

Users of Red Hat Enterprise Virtualization Hypervisor are advised to upgrade to this updated package, which fixes these issues.

New gnutls packages are available for Slackware 12.1, 12.2, 13.0, 13.1, and 13.37 to fix security issues.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0531 advisory.

    The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization     Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor     is a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes     everything necessary to run and manage virtual machines: A subset of the     Red Hat Enterprise Linux operating environment and the Red Hat Enterprise     Virtualization Agent.

    Note: Red Hat Enterprise Virtualization Hypervisor is only available for     the Intel 64 and AMD64 architectures with virtualization extensions.

    A flaw was found in the way libtasn1 decoded DER data. An attacker could     create carefully-crafted DER encoded input (such as an X.509 certificate)     that, when parsed by an application that uses libtasn1 (such as     applications using GnuTLS), could cause the application to crash.
    (CVE-2012-1569)

    A flaw was found in the way GnuTLS decrypted malformed TLS records. This     could cause a TLS/SSL client or server to crash when processing a     specially-crafted TLS record from a remote TLS/SSL connection peer.
    (CVE-2012-1573)

    An integer overflow flaw was found in the implementation of the printf     functions family. This could allow an attacker to bypass FORTIFY_SOURCE     protections and execute arbitrary code using a format string flaw in an     application, even though these protections are expected to limit the     impact of such flaws to an application abort. (CVE-2012-0864)

    Red Hat would like to thank Matthew Hall of Mu Dynamics for reporting     CVE-2012-1569 and CVE-2012-1573.

    This updated package provides updated components that include fixes for     various security issues. These issues have no security impact on Red Hat     Enterprise Virtualization Hypervisor itself, however. The security fixes     included in this update address the following CVE numbers:

    CVE-2011-4128 (gnutls issue)

    CVE-2012-0879, CVE-2012-1090, and CVE-2012-1097 (kernel issues)

    CVE-2012-0884 and CVE-2012-1165 (openssl issues)

    CVE-2012-0060, CVE-2012-0061, and CVE-2012-0815 (rpm issues)

    This update also fixes the following bug:

    * The Hypervisor previously set the lro_disable option for the enic driver.
    The driver does not support this option, as a result the Hypervisor did     not correctly detect and configure the network interfaces of a Cisco M81KR     adaptor, when present. The Hypervisor has been updated and no longer sets     the invalid option for this driver. (BZ#809463)

    Users of Red Hat Enterprise Virtualization Hypervisor are advised to     upgrade to this updated package, which fixes these issues.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A vulnerability has been found and corrected in GnuTLS :

gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure (CVE-2012-1573).

The updated packages have been patched to correct this issue.

The GnuTLS packages for Mandriva Linux 2011 has been upgraded to the 2.12.8 version due to problems with the test suite while building it, additionally a new dependency was added on p11-kit for the PKCS #11 support.

Updated gnutls packages that fix two security issues are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The GnuTLS library provides support for cryptographic algorithms and for protocols such as Transport Layer Security (TLS).

A flaw was found in the way GnuTLS decrypted malformed TLS records.
This could cause a TLS/SSL client or server to crash when processing a specially crafted TLS record from a remote TLS/SSL connection peer.
(CVE-2012-1573)

A boundary error was found in the gnutls_session_get_data() function.
A malicious TLS/SSL server could use this flaw to crash a TLS/SSL client or, possibly, execute arbitrary code as the client, if the client passed a fixed-sized buffer to gnutls_session_get_data() before checking the real size of the session data provided by the server.
(CVE-2011-4128)

Red Hat would like to thank Matthew Hall of Mu Dynamics for reporting CVE-2012-1573.

Users of GnuTLS are advised to upgrade to these updated packages, which contain backported patches to correct these issues. For the update to take effect, all applications linked to the GnuTLS library must be restarted, or the system rebooted.

ID	名稱	產品	系列	已發布	已更新	嚴重性
58504	CentOS 5 : gnutls (CESA-2012:0428)	Nessus	CentOS Local Security Checks	2012/3/28	2021/1/4	medium
61291	Scientific Linux Security Update : gnutls on SL6.x i386/x86_64 (20120327)	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
59829	SuSE 10 Security Update : GnuTLS (ZYPP Patch Number 8066)	Nessus	SuSE Local Security Checks	2012/7/3	2021/1/19	medium
79286	RHEL 5 : rhev-hypervisor5 (RHSA-2012:0488)	Nessus	Red Hat Local Security Checks	2014/11/17	2021/1/14	medium
70439	Slackware 12.1 / 12.2 / 13.0 / 13.1 / 13.37 : gnutls (SSA:2013-287-03)	Nessus	Slackware Local Security Checks	2013/10/15	2021/1/14	medium
78922	RHEL 6 : rhev-hypervisor6 (RHSA-2012:0531)	Nessus	Red Hat Local Security Checks	2014/11/8	2024/6/3	critical
58505	Mandriva Linux Security Advisory : gnutls (MDVSA-2012:040)	Nessus	Mandriva Local Security Checks	2012/3/28	2021/1/6	medium
58510	RHEL 6 : gnutls (RHSA-2012:0429)	Nessus	Red Hat Local Security Checks	2012/3/28	2021/1/14	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

critical

medium

medium