Executive Summary

Informations
NameMDVSA-2015:232First vendor Publication2015-05-08
VendorMandrivaLast vendor Modification2015-05-08
Severity (Vendor) N/ARevisionN/A

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:N/I:N/A:P)
Cvss Base Score4.3Attack RangeNetwork
Cvss Impact Score2.9Attack ComplexityMedium
Cvss Expoit Score8.6AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Detail

Updated libtasn1 packages fix security vulnerability:

A malformed certificate input could cause a heap overflow read in the DER decoding functions of Libtasn1. The heap overflow happens in the function _asn1_extract_der_octet() (CVE-2015-3622).

Original Source

Url : http://www.mandriva.com/security/advisories?name=MDVSA-2015:232

CWE : Common Weakness Enumeration

%idName
100 %CWE-119Failure to Constrain Operations within the Bounds of a Memory Buffer

CPE : Common Platform Enumeration

TypeDescriptionCount
Application62
Os1
Os1

Snort® IPS/IDS

DateDescription
2015-09-24gnuTLS _asn1_extract_der_octet memory error inbound malicious client dos attempt
RuleID : 35766 - Revision : 2 - Type : SERVER-OTHER
2015-09-24gnuTLS _asn1_extract_der_octet memory error inbound malicious client dos attempt
RuleID : 35765 - Revision : 2 - Type : SERVER-OTHER
2015-09-24gnuTLS _asn1_extract_der_octet memory error inbound malicious server dos attempt
RuleID : 35764 - Revision : 2 - Type : SERVER-OTHER
2015-09-24gnuTLS _asn1_extract_der_octet memory error inbound malicious server dos attempt
RuleID : 35763 - Revision : 2 - Type : SERVER-OTHER

Nessus® Vulnerability Scanner

DateDescription
2017-09-08Name : The remote EulerOS host is missing multiple security updates.
File : EulerOS_SA-2017-1171.nasl - Type : ACT_GATHER_INFO
2017-09-08Name : The remote EulerOS host is missing multiple security updates.
File : EulerOS_SA-2017-1172.nasl - Type : ACT_GATHER_INFO
2017-08-25Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2017-1860.nasl - Type : ACT_GATHER_INFO
2017-08-22Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20170801_libtasn1_on_SL7_x.nasl - Type : ACT_GATHER_INFO
2017-08-09Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2017-1860.nasl - Type : ACT_GATHER_INFO
2017-08-03Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2017-1860.nasl - Type : ACT_GATHER_INFO
2016-08-29Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2016-1600-1.nasl - Type : ACT_GATHER_INFO
2016-08-29Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2016-1601-1.nasl - Type : ACT_GATHER_INFO
2016-06-28Name : The remote openSUSE host is missing a security update.
File : openSUSE-2016-773.nasl - Type : ACT_GATHER_INFO
2016-06-15Name : The remote openSUSE host is missing a security update.
File : openSUSE-2016-716.nasl - Type : ACT_GATHER_INFO
2015-09-25Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201509-04.nasl - Type : ACT_GATHER_INFO
2015-09-11Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2015-1518-1.nasl - Type : ACT_GATHER_INFO
2015-08-13Name : The remote openSUSE host is missing a security update.
File : openSUSE-2015-542.nasl - Type : ACT_GATHER_INFO
2015-05-20Name : The remote Fedora host is missing a security update.
File : fedora_2015-7288.nasl - Type : ACT_GATHER_INFO
2015-05-12Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-2604-1.nasl - Type : ACT_GATHER_INFO
2015-05-11Name : The remote Debian host is missing a security-related update.
File : debian_DSA-3256.nasl - Type : ACT_GATHER_INFO
2015-05-11Name : The remote Mandriva Linux host is missing one or more security updates.
File : mandriva_MDVSA-2015-232.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
0
1
2
3
DateInformations
2015-05-15 00:28:25
  • Multiple Updates
2015-05-13 00:29:06
  • Multiple Updates
2015-05-12 13:28:21
  • Multiple Updates
2015-05-08 13:25:51
  • First insertion