KLA10460 Multiple vulnerabilities in OpenSSL

Detect date:

01/08/2015

Severity:

Warning

Description:

Multiple serious vulnerabilities have been found in OpenSSL. Malicious users can exploit these vulnerabilities to cause denial of service or bypass security restrictions.

Affected products:

OpenSSL versions earlier than 0.9.8zd
OpenSSL 1.0.0 versions earlier than 1.0.0p
OpenSSL 1.0.1 versions earlier than 1.0.1k

Solution:

Update to latest version!

Original advisories:

OpenSSL bulletin

Impacts:

ACE

Related products:

OpenSSl

CVE-IDS:

CVE-2014-35715.0Warning
CVE-2014-82755.0Warning
CVE-2014-35695.0Warning
CVE-2014-35725.0Warning
CVE-2014-35705.0Warning
CVE-2015-02065.0Warning
CVE-2015-02044.3Warning
CVE-2015-02055.0Warning

Exploitation:

Public exploits exist for this vulnerability.