This script is Copyright (C) 2017 Tenable Network Security, Inc.
The remote openSUSE host is missing a security update.
This update for gnutls fixes the following security issues :
- GnuTLS could have crashed when processing maliciously
crafted OpenPGP certificates (GNUTLS-SA-2017-2,
bsc#1018832, CVE-2017-5335, CVE-2017-5337,
- GnuTLS could have falsely accepted certificates when
using OCSP (GNUTLS-SA-2016-3, bsc#999646, CVE-2016-7444)
- GnuTLS could have suffered from 100% CPU load DoS
attacks by using SSL alert packets during the handshake
This update was imported from the SUSE:SLE-12:Update update project.
See also :
Update the affected gnutls packages.
Risk factor :
High / CVSS Base Score : 7.5