Oval Definition:oval:com.ubuntu.bionic:def:2019170230000000
Revision Date:2020-01-08Version:1
Title:CVE-2019-17023 on Ubuntu 18.04 LTS (bionic) - low.
Description:After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invalid state transition in the TLS State Machine. If the client gets into this state, incoming Application Data records will be ignored. This vulnerability affects Firefox < 72.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2019-17023
Platform(s):Ubuntu 18.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 18.04 LTS (bionic) is installed.
  • AND Package Information
  • firefox package in bionic was vulnerable but has been fixed (note: '72.0.1+build1-0ubuntu0.18.04.1').
  • OR mozjs38 package in bionic is affected and may need fixing.
  • OR mozjs52 package in bionic is affected and may need fixing.
  • OR nss package in bionic is affected and may need fixing.
    • BACK