Oval Definition:
oval:org.cisecurity:def:375
Revision Date
:
2016-02-08
Version
:
10
Title
:
AIX Logjam Vulnerability
Description
:
OpenSSL allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.1 signature that lacks a mask generation function parameter.
Family
:
unix
Class
:
vulnerability
Status
:
ACCEPTED
Reference(s)
:
CVE-2015-3194
Platform(s)
:
IBM AIX 6.1
IBM AIX 7.1
Product(s)
:
Definition Synopsis
platforms
IBM AIX 6.1 is installed
OR
IBM AIX 7.1 is installed
AND
filesets
File Version Exists
openssl.base greater than or equal 1.0.1.500
AND
openssl.base less than or equal 1.0.1.515
AND
NOT
Interim fix 101_ifix.151218 (vuid: 00F850C34C00121802123315) is installed
BACK