Lucene search
Gentoo FoundationMGASA-2014-0187HistoryApr 23, 2014 - 8:04 p.m.
Updated openssl packages fix CVE-2010-5298
2014-04-2320:04:21
Gentoo Foundation
advisories.mageia.org
28
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:N/I:P/A:P
0.125 Low
EPSS
Percentile
95.3%
Updated openssl packages fix security vulnerability: A read buffer can be freed even when it still contains data that is used later on, leading to a use-after-free. Given a race condition in a multi-threaded application it may permit an attacker to inject data from one connection into another or cause denial of service (CVE-2010-5298). Also fixed in this update is a potential security issue with detection of the “critical” flag for the TSA extended key usage under certain cases.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 3 | noarch | openssl | < 1.0.1e-1.7 | openssl-1.0.1e-1.7.mga3 |
| Mageia | 4 | noarch | openssl | < 1.0.1e-8.4 | openssl-1.0.1e-8.4.mga4 |
Related
prion
prion
Race condition
2014-04-14 22:38:00
nessus
nessus
AIX OpenSSL Advisory : openssl_advisory8.doc
2014-06-11 00:00:00
Mandriva Linux Security Advisory : openssl (MDVSA-2014:090)
2014-05-19 00:00:00
ubuntucve
ubuntucve
CVE-2010-5298
2014-04-14 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0187)
2022-01-28 00:00:00
Juniper Networks Junos OS SSL Session Injection Vulnerability
2015-01-23 00:00:00
OpenSSL Multiple DoS Vulnerabilities (20140605 - 3) - Linux
2021-07-30 00:00:00
cve
cve
CVE-2010-5298
2014-04-14 22:38:00
debiancve
debiancve
CVE-2010-5298
2014-04-14 22:38:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:09.openssl
2014-04-30 00:00:00
aix
aix
AIX OpenSSL Vulnerability
2014-06-06 05:44:06
openssl
openssl
Vulnerability in OpenSSL CVE-2010-5298
2014-04-08 00:00:00
securityvulns
securityvulns
FreeBSD Security Advisory FreeBSD-SA-14:09.openssl [REVISED]
2014-05-01 00:00:00
[USN-2192-1] OpenSSL vulnerabilities
2014-05-05 00:00:00
OpenSSL race conditions
2014-05-05 00:00:00
mariadbunix
mariadbunix
CVE-2010-5298
2014-04-14 22:38:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:52:47
f5
f5
SOL15328 - OpenSSL vulnerability CVE-2010-5298
2014-06-13 00:00:00
K15328 : OpenSSL vulnerability CVE-2010-5298
2014-06-20 00:00:00
freebsd
freebsd
OpenSSL -- Remote Data Injection / DoS
2010-02-09 00:00:00
debian
debian
[SECURITY] [DSA 2908-1] openssl security update
2014-04-17 21:28:20
ubuntu
ubuntu
OpenSSL vulnerabilities
2014-05-05 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl10 version 1.0.1h-alt1
2014-06-05 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 1.0.1h-alt1
2014-06-05 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.1h-alt1
2014-06-05 00:00:00
osv
osv
openssl - security update
2014-04-17 00:00:00
ibm
ibm
Security Bulletin: IBM Real-time Compression Appliance is exposed to the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0198, CVE-2010-5298.
2018-06-18 00:08:27
ics
ics
Siemens OpenSSL Vulnerabilities (Update G)
2018-08-29 12:00:00
vmware
vmware
VMware product updates address OpenSSL security vulnerabilities
2014-06-10 00:00:00
VMware product updates address OpenSSL security vulnerabilities
2014-06-10 00:00:00
kaspersky
kaspersky
KLA10382 Multiple vulnerabilities in VMware
2014-06-10 00:00:00
citrix
citrix
Citrix Security Advisory for OpenSSL Vulnerabilities (June 2014)
2014-06-06 04:00:00
redhat
redhat
(RHSA-2014:0625) Important: openssl security update
2014-06-05 00:00:00
(RHSA-2014:0679) Important: openssl security update
2014-06-10 00:00:00
(RHSA-2014:0628) Important: openssl security update
2014-06-05 00:00:00
slackware
slackware
[slackware-security] openssl
2014-06-06 05:27:11
oraclelinux
oraclelinux
openssl security update
2014-06-05 00:00:00
openssl security update
2014-07-23 00:00:00
thn
thn
OpenSSL Vulnerable to Man-in-the-Middle Attack and Several Other Bugs
2014-06-05 05:49:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2014-07-27 00:00:00
centos
centos
openssl security update
2014-06-05 13:06:47
huawei
huawei
Security Advisory-Multiple OpenSSL vulnerabilities on Huawei products
2014-06-13 00:00:00
fortinet
fortinet
Multiple Vulnerabilities in OpenSSL
2014-06-06 00:00:00
avleonov
avleonov
Parsing Nessus v2 XML reports with python
2020-03-09 01:12:00
intel
intel
cisco
cisco
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products
2014-06-05 22:40:00
amazon
amazon
Important: openssl
2014-06-04 15:45:00
fedora
fedora
[SECURITY] Fedora 20 Update: openssl-1.0.1e-38.fc20
2014-06-05 21:55:11
[SECURITY] Fedora 19 Update: openssl-1.0.1e-38.fc19
2014-06-05 21:54:15
[SECURITY] Fedora 21 Update: mingw-openssl-1.0.1j-1.fc21
2015-01-02 05:06:53
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:N/I:P/A:P
0.125 Low
EPSS
Percentile
95.3%
Related for MGASA-2014-0187