Oval Definition:oval:com.ubuntu.trusty:def:20173733000
Revision Date:2017-05-04Version:1
Title:CVE-2017-3733 on Ubuntu 14.04 LTS (trusty) - high.
Description:During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake (or vice-versa) then this can cause OpenSSL 1.1.0 before 1.1.0e to crash (dependent on ciphersuite). Both clients and servers are affected.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2017-3733
Platform(s):Ubuntu 14.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 14.04 LTS (trusty) is installed.
  • AND Package Information
  • NOT While related to the CVE in some way, the 'openssl' package in trusty is not affected (note: '1.0.1f-1ubuntu2.22').
  • OR NOT While related to the CVE in some way, the 'openssl098' package in trusty is not affected.
    • BACK