Design/Logic Flaw

🗓️ 27 Mar 2018 21:29:00Reported by PRIOn knowledge baseType

Implementation bug in PA-RISC CRYPTO_memcmp function allows attackers to forge authenticated messages with fewer attempts. Fixed in OpenSSL 1.1.0h

Reporter	Title	Published	Views	Family All 54
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities Impact IBM Predictive Insights	8 Sep 202020:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities exist in IBM Cognos Insight	24 Feb 202007:27	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilities in OpenSSL affects IBM Watson Studio Local	20 Dec 201913:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Workload Scheduler	19 Jun 202015:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Spectrum Protect (formerly Tivoli Storage Manager) Client and IBM Spectrum Protect (formerly Tivoli Storage Manager) for Virtual Environments: Data Protection for VMware	24 Sep 201808:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private	20 Jul 201818:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in OpenSSL affect IBM Spectrum Protect (formerly Tivoli Storage Manager) Client NetApp Services (CVE-2017-3737, CVE-2017-3738, CVE-2018-0733, CVE-2018-0739)	26 Sep 201820:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in OpenSSL affect IBM i	18 Dec 201914:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities exist in IBM Cognos TM1	24 Feb 202007:27	–	ibm
IBM Security Bulletins	Security Bulletin:IBM Security Identity Adapters has released a fix in response to the OpenSSL vulnerabilities	30 Jul 201921:50	–	ibm

Source	Link
openssl	www.openssl.org/news/secadv/20180327.txt
git	www.git.openssl.org/gitweb/
securitytracker	www.securitytracker.com/id/1040576
securityfocus	www.securityfocus.com/bid/103517
security	www.security.netapp.com/advisory/ntap-20180330-0002/
tenable	www.tenable.com/security/tns-2018-04
tenable	www.tenable.com/security/tns-2018-07
tenable	www.tenable.com/security/tns-2018-06
oracle	www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

24 Aug 2020 17:37Current

5.9Medium risk

Vulners AI Score5.9

EPSS0.02235