Detections
Analytics

Amazon Linux 2 : stunnel / amazon-efs-utils (ALAS-2018-996)

high Nessus Plugin ID 109179

Language:

Synopsis

The remote Amazon Linux 2 host is missing a security update.

Description

This update adds the checkHost option to stunnel, which verifies the host of the peer certificate subject. Certificates are accepted if no checkHost option was specified, or the host name of the peer certificate matches any of the hosts specified with checkHost.

This update adds the OCSPaia option to stunnel, which enables stunnel to validate certificates with the list of OCSP responder URLs retrieved from their AIA (Authority Information Access) extension.

This update adds the verify option to stunnel, which verifies the peer certificate. The different verification levels are as follows :

level 0 - request and ignore the peer certificate

level 1 - verify the peer certificate if present

level 2 - verify the peer certificate

level 3 - verify the peer against a locally installed certificate

level 4 - ignore the chain and only verify the peer certificate

default - no verify

Certificates for verification needs to be stored either in the file specified with CAfile, or in the directory specified with CApath.

This update enables amazon-efs-utils to use new features added to stunnel to encrypt data in transit to EFS

Solution

Run 'yum update stunnel' to update your system.

Run 'yum update amazon-efs-utils' to update your system.

See Also

https://alas.aws.amazon.com/AL2/ALAS-2018-996.html

Plugin Details

Severity: High

ID: 109179

File Name: al2_ALAS-2018-996.nasl

Version: 1.1

Type: local

Agent: unix

Published: 4/20/2018

Updated: 4/20/2018

Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Nessus Agent, Nessus

Vulnerability Information

CPE: p-cpe:/a:amazon:linux:stunnel-debuginfo, p-cpe:/a:amazon:linux:amazon-efs-utils, cpe:/o:amazon:linux:2, p-cpe:/a:amazon:linux:stunnel

Required KB Items: Host/local_checks_enabled, Host/AmazonLinux/release, Host/AmazonLinux/rpm-list

Patch Publication Date: 4/19/2018

Reference Information

ALAS: 2018-996