The version of Oracle Secure Global Desktop installed on the remote host is 4.63, 4.71, or 5.2 and is missing a security patch from the July 2016 Critical Patch Update (CPU). It is, therefore, affected by the following vulnerabilities :

  - An integer overflow condition exists in the X Server     subcomponent in the read_packet() function due to     improper validation of user-supplied input when     calculating the amount of memory required to handle     returned data. A remote attacker can exploit this to     cause a denial of service condition or the execution of     arbitrary code. Note that this vulnerability only     affects versions 4.71 and 5.2. (CVE-2013-2064)

  - A carry propagating flaw exists in the OpenSSL     subcomponent in the x86_64 Montgomery squaring     implementation that may cause the BN_mod_exp() function     to produce incorrect results. An attacker can exploit     this to obtain sensitive information regarding private     keys. (CVE-2015-3193)

  - A NULL pointer dereference flaw exists in the OpenSSL     subcomponent in file rsa_ameth.c when handling ASN.1     signatures that use the RSA PSS algorithm but are     missing a mask generation function parameter. A remote     attacker can exploit this to cause the signature     verification routine to crash, leading to a denial of     service. (CVE-2015-3194)

  - A key disclosure vulnerability exists in the OpenSSL     subcomponent due to improper handling of cache-bank     conflicts on the Intel Sandy-bridge microarchitecture.
    An attacker can exploit this to gain access to RSA key     information. (CVE-2016-0702)

  - A NULL pointer dereference flaw exists in the OpenSSL     subcomponent in the BN_hex2bn() and BN_dec2bn()     functions. A remote attacker can exploit this to trigger     a heap corruption, resulting in the execution of     arbitrary code. (CVE-2016-0797)

  - Multiple memory corruption issues exist in the OpenSSL     subcomponent that allow a remote attacker to cause a     denial of service condition or the execution of     arbitrary code. (CVE-2016-0799)

  - A heap buffer overflow condition exists in the OpenSSL     subcomponent in the EVP_EncodeUpdate() function within     file crypto/evp/encode.c that is triggered when handling     a large amount of input data. An unauthenticated, remote     attacker can exploit this to cause a denial of service     condition. (CVE-2016-2105)

  - Multiple flaws exist in the OpenSSL subcomponent in the     aesni_cbc_hmac_sha1_cipher() function in file     crypto/evp/e_aes_cbc_hmac_sha1.c and the     aesni_cbc_hmac_sha256_cipher() function in file     crypto/evp/e_aes_cbc_hmac_sha256.c that are triggered     when the connection uses an AES-CBC cipher and AES-NI     is supported by the server. A man-in-the-middle attacker     can exploit these to conduct a padding oracle attack,     resulting in the ability to decrypt the network traffic.
    (CVE-2016-2107)

  - An unspecified flaw exists in the OpenSSL subcomponent     that allows a remote attacker to execute arbitrary     code. (CVE-2016-3613)

Oracle Secure Global Desktop Multiple Vulnerabilities (July 2016 CPU)

critical Nessus Plugin ID 92543

No changelogs found