OpenSSL Multiple Vulnerabilities -19 Jun16 (Linux)

This host is running OpenSSL and is prone to multiple vulnerabilities.

Multiple flaws are due to: 1. Incorrectly using of pointer arithmetic for heap-buffer boundary checks which might allow remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c. 2. Improperly use of constant-time operations in crypto/dsa/dsa_oss.c which allow local users to breach the DSA private key.

OpenSSL 1.0.2h and previous versions.

Checks if a vulnerable version is present on the target host.

For the undefined pointer arithmetic vulnerability, there is a fix available for OpenSSL 1.0.2 and OpenSSL 1.0.1. To prevent DSA private key breach, a fix is available, too.