Lucene search
Gentoo FoundationMGASA-2014-0012HistoryJan 17, 2014 - 4:33 a.m.
Updated openssl package fixes security vulnerabilities
2014-01-1704:33:19
Gentoo Foundation
advisories.mageia.org
12
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
0.542 Medium
EPSS
Percentile
97.6%
Updated openssl packages fix security vulnerabilities: The DTLS retransmission implementation in OpenSSL through 1.0.1e does not properly maintain data structures for digest and encryption contexts, which might allow man-in-the-middle attackers to trigger the use of a different context by interfering with packet delivery (CVE-2013-6450). A carefully crafted invalid TLS handshake could crash OpenSSL with a NULL pointer exception. A malicious server could use this flaw to crash a connecting client (CVE-2013-4353).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 3 | noarch | openssl | < 1.0.1e-1.3 | openssl-1.0.1e-1.3.mga3 |
Related
nessus
nessus
Fedora 19 : openssl-1.0.1e-37.fc19 (2014-0456)
2014-01-12 00:00:00
Fedora 18 : openssl-1.0.1e-37.fc18 (2014-0474)
2014-01-13 00:00:00
Fedora 20 : openssl-1.0.1e-37.fc20 (2014-0476)
2014-01-12 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0012)
2022-01-28 00:00:00
Ubuntu Update for openssl USN-2079-1
2014-01-10 00:00:00
RedHat Update for openssl RHSA-2014:0015-01
2014-01-21 00:00:00
redhat
redhat
(RHSA-2014:0015) Important: openssl security update
2014-01-08 00:00:00
(RHSA-2014:0416) Important: rhevm-spice-client security update
2014-04-17 00:00:00
(RHSA-2014:0041) Important: rhev-hypervisor6 security update
2014-01-21 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 1.0.1f-alt1
2014-01-06 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.1f-alt1
2014-01-06 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 1.0.1f-alt1
2014-01-06 00:00:00
ibm
ibm
oraclelinux
oraclelinux
openssl security update
2014-01-08 00:00:00
openssl security update
2014-10-16 00:00:00
openssl-fips security update
2015-04-02 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: mingw-openssl-1.0.1e-5.fc20
2014-01-28 04:44:00
[SECURITY] Fedora 19 Update: mingw-openssl-1.0.1e-5.fc19
2014-02-04 02:52:09
[SECURITY] Fedora 20 Update: openssl-1.0.1e-37.fc20
2014-01-10 07:58:51
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:03.openssl
2014-01-14 00:00:00
freebsd
freebsd
openssl -- multiple vulnerabilities
2014-01-06 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2014-01-09 00:00:00
centos
centos
openssl security update
2014-01-08 22:59:22
securityvulns
securityvulns
OpenSSL security vulnerabilities
2014-01-08 00:00:00
[SECURITY] [DSA 2833-1] openssl security update
2014-01-08 00:00:00
Oracle / Sun / PeopleSoft / MySQL multiple security vulnerabilities
2015-01-25 00:00:00
amazon
amazon
Important: openssl
2014-01-14 15:56:00
slackware
slackware
openssl
2014-01-13 22:30:19
aix
aix
Multiple OpenSSL vulnerabilities
2014-02-25 14:07:48
checkpoint_advisories
checkpoint_advisories
OpenSSL DTLS Retransmission Denial of Service - Ver2 (CVE-2013-6450)
2014-12-28 00:00:00
OpenSSL DTLS Retransmission Denial of Service (CVE-2013-6450)
2014-03-09 00:00:00
OpenSSL TLS Record Tampering Denial of Service (CVE-2013-4353)
2014-03-26 00:00:00
debiancve
debiancve
CVE-2013-6450
2014-01-01 16:05:00
CVE-2013-4353
2014-01-09 01:55:00
seebug
seebug
OpenSSL DTLS中间人攻击多个安全措施绕过漏洞
2014-01-03 00:00:00
f5
f5
K15158 : OpenSSL vulnerability CVE-2013-6450
2015-02-04 00:00:00
K15180 : OpenSSL vulnerability CVE-2013-4353
2014-04-17 00:00:00
SOL15158 - OpenSSL vulnerability CVE-2013-6450
2014-04-17 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2017-02-08 05:12:04
Denial Of Service (DoS) Through Null Pointer Dereference
2017-02-08 05:45:38
Denial Of Service (DoS) Through Null Pointer Dereference
2019-01-15 08:54:56
ubuntucve
ubuntucve
CVE-2013-6450
2014-01-01 00:00:00
CVE-2013-4353
2014-01-06 00:00:00
cve
cve
CVE-2013-6450
2014-01-01 16:05:00
CVE-2013-4353
2014-01-09 01:55:00
prion
prion
Information disclosure
2014-01-01 16:05:00
Null pointer dereference
2014-01-09 01:55:00
debian
debian
[SECURITY] [DSA 2837-1] openssl security update
2014-01-07 15:41:18
[SECURITY] [DSA 2833-1] openssl security update
2014-01-01 12:09:10
openssl
openssl
Vulnerability in OpenSSL CVE-2013-6450
2013-12-13 00:00:00
Vulnerability in OpenSSL CVE-2013-4353
2014-01-06 00:00:00
gentoo
gentoo
OpenSSL: Denial of service
2014-02-21 00:00:00
OpenSSL: Multiple vulnerabilities
2014-12-26 00:00:00
oracle
oracle
Oracle Critical Patch Update - July 2014
2014-07-15 00:00:00
Oracle Critical Patch Update Advisory - January 2015
2015-03-10 00:00:00
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
0.542 Medium
EPSS
Percentile
97.6%
Related for MGASA-2014-0012