Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:DLA-0008-1
HistoryJun 20, 2014 - 12:00 a.m.

openssl - security update

2014-06-2000:00:00
Google
osv.dev
36

EPSS

0.973

Percentile

99.9%

JSON
  • CVE-2014-0224
    This update updates the upstream fix for CVE-2014-0224 to address
    problems with renegotiation under some conditions.

original text:
KIKUCHI Masashi discovered that carefully crafted handshakes can
force the use of weak keys, resulting in potential man-in-the-middle
attacks.

  • CVE-2012-4929
    ZLIB compression is now disabled by default. If you need
    to re-enable it for some reason, you can set the environment
    variable OPENSSL_NO_DEFAULT_ZLIB.

It’s important that you upgrade the libssl0.9.8 package and not
just the openssl package.

All applications linked to openssl need to be restarted. You can
use the tool checkrestart from the package debian-goodies to
detect affected programs or reboot your system.

For Debian 6 Squeeze, these issues have been fixed in openssl version 0.9.8o-4squeeze16

Related

debian 6
openvas 33
nessus 47
ubuntu 3
prion 3
osv 4
nvd 3
cvelist 3
threatpost 4
f5 6
jvn 2
cve 3
veracode 3
debiancve 2
ibm 38
ubuntucve 3
cert 2
centos 2
amazon 2
nodejsblog 1
arista 1
thn 1
checkpoint_security 2
oraclelinux 3
redhat 7
checkpoint_advisories 1
packetstorm 2
metasploit 2
hp 1
mariadbunix 1
kaspersky 1
hackerone 1
paloalto 1
openssl 1
securityvulns 2
fedora 1
kitploit 1
debian
debian
openssl security update
2014-06-20 16:35:33
openssl security update
2014-06-20 16:35:50
[SECURITY] [DSA 2627-1] nginx security update
2013-02-17 11:14:31
openvas
openvas
Debian: Security Advisory (DLA-0008-1)
2023-03-08 00:00:00
Ubuntu Update for openssl USN-1898-1
2013-07-05 00:00:00
SUSE: Security Advisory (SUSE-SU-2012:1428-1)
2021-06-09 00:00:00
nessus
nessus
Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : openssl vulnerability (USN-1898-1)
2013-07-05 00:00:00
F5 Networks BIG-IP : CRIME vulnerability via TLS 1.2 protocol (K14054)
2014-10-10 00:00:00
openSUSE Security Update : libqt4 (openSUSE-SU-2012:1420-1)
2014-06-13 00:00:00
ubuntu
ubuntu
Qt vulnerability
2012-11-08 00:00:00
OpenSSL vulnerability
2013-07-04 00:00:00
Apache HTTP Server vulnerabilities
2012-11-08 00:00:00
prion
prion
Design/Logic Flaw
2012-09-15 18:55:00
Design/Logic Flaw
2014-06-05 21:55:00
Design/Logic Flaw
2020-02-21 18:15:00
osv
osv
CGA-3gmg-9rq9-3vfp
2024-06-06 12:21:55
nginx - information leak
2013-02-17 00:00:00
lighttpd - several issues
2013-02-17 00:00:00
nvd
nvd
CVE-2012-4929
2012-09-15 18:55:03
CVE-2014-0224
2014-06-05 21:55:07
CVE-2013-3587
2020-02-21 18:15:11
cvelist
cvelist
CVE-2012-4929
2012-09-15 18:00:00
CVE-2014-0224
2014-06-05 21:00:00
CVE-2013-3587
2020-02-21 17:11:47
threatpost
threatpost
Apple Patches Mass of Security Bugs in OS X and Safari
2013-06-05 09:51:54
SSL Pulse Scans Quantify Vulnerable OpenSSL Servers
2014-06-13 14:05:55
New OpenSSL MITM Flaw Affects All Clients, Some Server Versions
2014-06-05 09:30:06
f5
f5
SOL14054 - CRIME vulnerability via TLS 1.2 protocol CVE-2012-4929
2012-12-05 00:00:00
K14054 : CRIME vulnerability via TLS 1.2 protocol CVE-2012-4929
2013-09-09 00:00:00
SOL15325 - OpenSSL vulnerability CVE-2014-0224
2014-06-05 00:00:00
jvn
jvn
JVN#65273415: Android OS issue where it is affected by the CRIME attack
2016-07-22 00:00:00
JVN#61247051: OpenSSL improper handling of Change Cipher Spec message
2014-06-06 00:00:00
cve
cve
CVE-2012-4929
2012-09-15 18:55:03
CVE-2014-0224
2014-06-05 21:55:07
CVE-2013-3587
2020-02-21 18:15:11
veracode
veracode
Information Leakage
2019-01-15 08:58:53
Man-in-the-Middle (MitM)
2017-02-07 02:08:35
Man-in-the-Middle (MitM)
2019-01-15 08:52:44
debiancve
debiancve
CVE-2012-4929
2012-09-15 18:55:03
CVE-2014-0224
2014-06-05 21:55:07
ibm
ibm
Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerability in OpenSSL (CVE-2012-4929)
2020-03-03 19:02:20
Security Bulletin: OpenSSL security vulnerability on IBM SONAS (CVE-2014-0224)
2018-06-18 00:08:27
Security Bulletin: IBM Sterling Connect:Direct for UNIX is affected by the following OpenSSL vulnerabilities: CVE-2014-0224
2020-07-24 22:19:08
ubuntucve
ubuntucve
CVE-2012-4929
2012-09-15 00:00:00
CVE-2014-0224
2014-06-05 00:00:00
CVE-2013-3587
2020-02-21 00:00:00
cert
cert
OpenSSL is vulnerable to a man-in-the-middle attack
2014-06-05 00:00:00
BREACH vulnerability in compressed HTTPS
2013-08-02 00:00:00
centos
centos
openssl security update
2014-06-06 01:40:21
openssl097a, openssl098e security update
2014-06-05 13:21:51
amazon
amazon
Important: openssl098e
2014-06-05 15:38:00
Important: openssl097a
2014-06-05 15:38:00
nodejsblog
nodejsblog
OpenSSL and Breaking UTF-8 Change (fixed in Node v0.8.27 and v0.10.29)
2014-06-16 00:00:00
arista
arista
Security Advisory 0005
2014-06-09 00:00:00
thn
thn
Android 4.3 and Earlier versions Vulnerable to Critical Code-Execution Flaw
2014-06-26 21:22:00
checkpoint_security
checkpoint_security
SSL/TLS MITM vulnerability (CVE-2014-0224)
2014-06-05 21:00:00
Check Point response to CVE-2012-4929, CVE-2012-4930 aka CRIME attack
2012-10-20 22:00:00
oraclelinux
oraclelinux
openssl security update
2014-06-05 00:00:00
openssl security update
2014-06-11 00:00:00
openssl098e security update
2014-07-23 00:00:00
redhat
redhat
(RHSA-2014:0627) Important: openssl security update
2014-06-05 00:00:00
(RHSA-2014:0624) Important: openssl security update
2014-06-05 00:00:00
(RHSA-2014:0630) Important: Red Hat JBoss Enterprise Application Platform 5.2.0 security update
2014-06-05 14:48:54
checkpoint_advisories
checkpoint_advisories
OpenSSL TLS Man-In-The-Middle Security Bypass (CVE-2014-0224)
2014-06-09 00:00:00
packetstorm
packetstorm
SSL Labs API Client
2024-08-31 00:00:00
OpenSSL Server-Side ChangeCipherSpec Injection Scanner
2024-08-31 00:00:00
metasploit
metasploit
OpenSSL Server-Side ChangeCipherSpec Injection Scanner
2014-06-09 22:38:11
SSL Labs API Client
2015-03-27 11:34:11
hp
hp
HPSBPI03107 rev.3 - Certain HP LaserJet Printers, MFPs and Certain HP OfficeJet Enterprise Printers using OpenSSL, Remote Unauthorized Access
2014-09-18 00:00:00
mariadbunix
mariadbunix
CVE-2014-0224
2014-06-05 21:55:07
kaspersky
kaspersky
KLA10266 OSI vulnerability in MySQL Workbench
2014-06-27 00:00:00
hackerone
hackerone
Whisper: CVE-2014-0224 openssl ccs vulnerability
2015-03-11 04:42:02
paloalto
paloalto
OpenSSL Man-in-the-middle vulnerability
2014-06-09 07:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2014-0224
2014-06-05 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2579-1] apache2 security update
2012-12-02 00:00:00
Apache security vulnerabilities
2012-12-02 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: mingw-openssl-1.0.1e-1.fc18
2013-04-03 04:51:11
kitploit
kitploit
Sitadel - Web Application Security Scanner
2019-01-14 12:13:00

EPSS

0.973

Percentile

99.9%

JSON
Related for OSV:DLA-0008-1
debian6openvas33nessus47ubuntu3prion3osv4nvd3cvelist3threatpost4f56jvn2cve3veracode3debiancve2ibm38ubuntucve3cert2centos2amazon2nodejsblog1arista1thn1checkpoint_security2oraclelinux3redhat7checkpoint_advisories1packetstorm2metasploit2hp1mariadbunix1kaspersky1hackerone1paloalto1openssl1securityvulns2fedora1kitploit1