4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.023 Low
EPSS
Percentile
88.4%
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3)
and Transport Layer Security (TLS v1) protocols, as well as a
full-strength, general purpose cryptography library.
A ciphersuite downgrade flaw was found in the OpenSSL SSL/TLS server code.
A remote attacker could possibly use this flaw to change the ciphersuite
associated with a cached session stored on the server, if the server
enabled the SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG option, possibly
forcing the client to use a weaker ciphersuite after resuming the session.
(CVE-2010-4180)
Note: With this update, setting the SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG
option has no effect and this bug workaround can no longer be enabled.
All OpenSSL users should upgrade to these updated packages, which contain a
backported patch to resolve this issue. For the update to take effect, all
services linked to the OpenSSL library must be restarted, or the system
rebooted.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | 6 | x86_64 | openssl | < 1.0.0-4.el6_0.2 | openssl-1.0.0-4.el6_0.2.x86_64.rpm |
RedHat | 6 | i686 | openssl | < 1.0.0-4.el6_0.2 | openssl-1.0.0-4.el6_0.2.i686.rpm |
RedHat | 6 | ppc | openssl-devel | < 1.0.0-4.el6_0.2 | openssl-devel-1.0.0-4.el6_0.2.ppc.rpm |
RedHat | 6 | ppc64 | openssl-perl | < 1.0.0-4.el6_0.2 | openssl-perl-1.0.0-4.el6_0.2.ppc64.rpm |
RedHat | 6 | ppc64 | openssl-static | < 1.0.0-4.el6_0.2 | openssl-static-1.0.0-4.el6_0.2.ppc64.rpm |
RedHat | 6 | s390x | openssl-static | < 1.0.0-4.el6_0.2 | openssl-static-1.0.0-4.el6_0.2.s390x.rpm |
RedHat | 6 | ppc64 | openssl-devel | < 1.0.0-4.el6_0.2 | openssl-devel-1.0.0-4.el6_0.2.ppc64.rpm |
RedHat | 6 | i686 | openssl-devel | < 1.0.0-4.el6_0.2 | openssl-devel-1.0.0-4.el6_0.2.i686.rpm |
RedHat | 6 | s390 | openssl-devel | < 1.0.0-4.el6_0.2 | openssl-devel-1.0.0-4.el6_0.2.s390.rpm |
RedHat | 6 | ppc | openssl-debuginfo | < 1.0.0-4.el6_0.2 | openssl-debuginfo-1.0.0-4.el6_0.2.ppc.rpm |