Oval Definition:oval:com.ubuntu.xenial:def:20173733000
Revision Date:2017-05-04Version:1
Title:CVE-2017-3733 on Ubuntu 16.04 LTS (xenial) - high.
Description:During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake (or vice-versa) then this can cause OpenSSL 1.1.0 before 1.1.0e to crash (dependent on ciphersuite). Both clients and servers are affected.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2017-3733
Platform(s):Ubuntu 16.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 16.04 LTS (xenial) is installed.
  • AND NOT While related to the CVE in some way, the 'openssl' package in xenial is not affected (note: '1.0.2g-1ubuntu4.6').
    • BACK