OpenSSL 1.0.0f fixes 6 security flaws, including potential double-free vulnerability in X509 certificates and uninitialized memory in SSL records. Vulnerabilities also exist in RFC 3779 data and support for handshake restarts in SGC, along with a potential crash due to a malicious TLS client sending invalid GOST parameters
Reporter | Title | Published | Views | Family All 199 |
---|---|---|---|---|
![]() | FreeBSD Ports: openssl | 12 Feb 201200:00 | – | openvas |
![]() | FreeBSD Ports: openssl | 12 Feb 201200:00 | – | openvas |
![]() | OpenSSL < 0.9.8s, 1.0.x < 1.0.0f Multiple Vulnerabilities | 20 Jan 201200:00 | – | openvas |
![]() | Mandriva Update for openssl MDVSA-2012:007 (openssl) | 3 Aug 201200:00 | – | openvas |
![]() | Mandriva Update for openssl MDVSA-2012:007 (openssl) | 3 Aug 201200:00 | – | openvas |
![]() | openSUSE: Security Advisory for openssl (openSUSE-SU-2012:0083-1) | 2 Aug 201200:00 | – | openvas |
![]() | SUSE: Security Advisory (SUSE-SU-2012:0084-1) | 9 Jun 202100:00 | – | openvas |
![]() | Gentoo Security Advisory GLSA 201203-12 (openssl) | 12 Mar 201200:00 | – | openvas |
![]() | SuSE Update for openssl openSUSE-SU-2012:0083-1 (openssl) | 2 Aug 201200:00 | – | openvas |
![]() | Gentoo Security Advisory GLSA 201203-12 (openssl) | 12 Mar 201200:00 | – | openvas |
Source | Link |
---|---|
openssl | www.openssl.org/news/secadv_20120104.txt |
OS | OS Version | Architecture | Package | Package Version | Filename |
---|---|---|---|---|---|
FreeBSD | any | noarch | openssl | 1.0.0_8 | UNKNOWN |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo