The vulnerability of the PA-RISC CRYPTO_memcmp function in the OpenSSL library, which allows attackers to create fake messages

🗓️ 31 May 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

PA-RISC CRYPTO_memcmp in OpenSSL has input validation flaws enabling attackers to craft messages.

Reporter	Title	Published	Views	Family All 55
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities Impact IBM Predictive Insights	8 Sep 202020:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities exist in IBM Cognos Insight	24 Feb 202007:27	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilities in OpenSSL affects IBM Watson Studio Local	20 Dec 201913:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Workload Scheduler	19 Jun 202015:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Spectrum Protect (formerly Tivoli Storage Manager) Client and IBM Spectrum Protect (formerly Tivoli Storage Manager) for Virtual Environments: Data Protection for VMware	24 Sep 201808:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private	20 Jul 201818:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in OpenSSL affect IBM Spectrum Protect (formerly Tivoli Storage Manager) Client NetApp Services (CVE-2017-3737, CVE-2017-3738, CVE-2018-0733, CVE-2018-0739)	26 Sep 201820:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in OpenSSL affect IBM i	18 Dec 201914:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities exist in IBM Cognos TM1	24 Feb 202007:27	–	ibm
IBM Security Bulletins	Security Bulletin:IBM Security Identity Adapters has released a fix in response to the OpenSSL vulnerabilities	30 Jul 201921:50	–	ibm

Vulners

Node

openssl opensslRange1.1.0–1.1.0g

Source	Link
oracle	www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
opennet	www.opennet.ru/opennews/art.shtml
web	www.web.nvd.nist.gov/view/vuln/detail

23 Mar 2021 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 24.3

CVSS 35.9

EPSS0.02235

pa risc cryptographic memcmp openssl security flaw input validation flaw