Oracle Linux 7 : curl (ELSA-2016-2575)

This script is Copyright (C) 2016 Tenable Network Security, Inc.


Synopsis :

The remote Oracle Linux host is missing one or more security updates.

Description :

From Red Hat Security Advisory 2016:2575 :

An update for curl is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security
impact of Moderate. A Common Vulnerability Scoring System (CVSS) base
score, which gives a detailed severity rating, is available for each
vulnerability from the CVE link(s) in the References section.

The curl packages provide the libcurl library and the curl utility for
downloading files from servers using various protocols, including
HTTP, FTP, and LDAP.

Security Fix(es) :

* It was found that the libcurl library did not prevent TLS session
resumption when the client certificate had changed. An attacker could
potentially use this flaw to hijack the authentication of the
connection by leveraging a previously created connection with a
different client certificate. (CVE-2016-5419)

* It was found that the libcurl library did not check the client
certificate when choosing the TLS connection to reuse. An attacker
could potentially use this flaw to hijack the authentication of the
connection by leveraging a previously created connection with a
different client certificate. (CVE-2016-5420)

* It was found that the libcurl library using the NSS (Network
Security Services) library as TLS/SSL backend incorrectly re-used
client certificates for subsequent TLS connections in certain cases.
An attacker could potentially use this flaw to hijack the
authentication of the connection by leveraging a previously created
connection with a different client certificate. (CVE-2016-7141)

Additional Changes :

For detailed information on changes in this release, see the Red Hat
Enterprise Linux 7.3 Release Notes linked from the References section.

See also :

https://oss.oracle.com/pipermail/el-errata/2016-November/006466.html

Solution :

Update the affected curl packages.

Risk factor :

Medium / CVSS Base Score : 5.0
(CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N)
CVSS Temporal Score : 4.1
(CVSS2#E:F/RL:OF/RC:ND)
Public Exploit Available : true

Family: Oracle Linux Local Security Checks

Nessus Plugin ID: 94698 ()

Bugtraq ID:

CVE ID: CVE-2016-5419
CVE-2016-5420
CVE-2016-7141

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now