Oval Definition:	oval:com.ubuntu.cosmic:def:201540000000000
Revision Date: 2015-05-20 Version: 1 Title: CVE-2015-4000 on Ubuntu 18.10 (cosmic) - medium. Description: The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue. Family: unix Class: vulnerability Status: Reference(s): CVE-2015-4000 Platform(s): Ubuntu 18.10 Product(s): Definition Synopsis Ubuntu 18.10 (cosmic) is installed. AND Package Information firefox package in cosmic was vulnerable but has been fixed (note: '39.0+build5-0ubuntu1'). OR nss package in cosmic was vulnerable but has been fixed (note: '2:3.19.2-1ubuntu1'). OR openjdk-8 package in cosmic, is related to the CVE in some way and has been fixed (note: '8u66-b17-1'). OR openssl package in cosmic, is related to the CVE in some way and has been fixed (note: '1.0.2a-1ubuntu1'). OR thunderbird package in cosmic was vulnerable but has been fixed (note: '1:31.8.0+build1-0ubuntu1').
BACK