PT-2016-1335 · Openssl +9 · Openssl +12

🗓️ 01 Mar 2016 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 13 Views

OpenSSL 1.0.1 to 1.0.1s and 1.0.2 to 1.0.2g have fmtstr length bugs; DoS and RSA key recovery risk; upgrade.

Reporter	Title	Published	Views	Family All 5840
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Tivoli Netcool Configuration Manager (ITNCM)	20 Dec 201916:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect Lenovo SAN Volume Controller and Storwize Family (CVE-2014-3505, CVE-2014-3506, CVE-2014-3507, CVE-2014-3508, CVE-2014-3509, CVE-2014-3510, CVE-2014-3511)	29 Mar 202301:48	–	ibm
IBM Security Bulletins	Security Bulletin:GSKit vulnerable to FREAK - GSKit Ephemeral RSA Vulnerability	3 Aug 201804:23	–	ibm
IBM Security Bulletins	Security Bulletin:Multiple Security Vulnerabilities exist in IBM Cognos Insight	24 Feb 202007:27	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in SSLv3 affects IBM Content Navigator (CVE-2014-3566)	17 Jun 201812:09	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL vulnerability in current release of the IBM® SDK for Node.js™	9 Aug 201804:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple OpenSSL vulnerabilities affect IBM Tivoli Network Manager IP Edition 3.9 Fix Pack 4 - HTTPS support for Perl Collector install.	17 Jun 201815:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities exist in IBM Cognos Insight	24 Feb 202007:27	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect Juniper EX Series Network Switches sold by IBM for use in IBM Products (CVE-2014-3569, CVE-2014-3570, CVE-2014-3572, CVE-2014-8275, CVE-2015-0204, CVE-2015-0205)	31 Jan 201902:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM QRadar SIEM (CVE-2014-3567, CVE-2014-3568, CVE-2014-3508, CVE-2014-3511)	23 Feb 202217:02	–	ibm

Source	Link
github	www.github.com/mpgn/poodle-PoC
github	www.github.com/FiloSottile/CVE-2016-2107
github	www.github.com/ssllabs/openssl-ccs-cve-2014-0224
github	www.github.com/secretnonempty/CVE-2014-0224
github	www.github.com/AbhishekGhosh/FREAK-Attack-CVE-2015-0204-Testing-Script
github	www.github.com/ricedu/CVE-2014-0195
bdu	www.bdu.fstec.ru/vul/2016-00635
bdu	www.bdu.fstec.ru/vul/2015-00120
bdu	www.bdu.fstec.ru/vul/2015-00126
bdu	www.bdu.fstec.ru/vul/2015-11039

13 Dec 2022 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 210

CVSS 3.17.5

CVSS 39.8

EPSS0.99999