Oval Definition:oval:com.ubuntu.precise:def:20153405000
Revision Date:2015-04-12Version:1
Title:CVE-2015-3405 on Ubuntu 12.04 LTS (precise) - medium.
Description:Creating MD5 keys will fail on big endian machines: A random byte is placed into the lowest memory address of an int, and the LSB is extracted from this integer. This is the same byte on little-endian machines, but on big endian machines the wrong end of the integer is extracted over and over again. If this byte is rejected, the program is trapped in an infinite loop; if the byte is accepted as a random byte, the program terminates but the byte sequence is probably anything but random.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2015-3405
Platform(s):Ubuntu 12.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 12.04 LTS (precise) is installed.
  • AND The 'ntp' package in precise was vulnerable but has been fixed (note: '1:4.2.6.p3+dfsg-1ubuntu3.4').
  • BACK