259 matches found
Multiple OpenSSL vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Fri Mar 15 03:20:11 CDT 2013 The most recent version of this document is available here: | Updated: Wed Jun 5 10:22:29 CDT 2013 | Update: Fix available for FIPS version | Update: Corrected CVSS base score and vector...
CentOS Update for openssl CESA-2013:0587 centos6
Check for the Version of openssl OpenVAS Vulnerability Test CentOS Update for openssl CESA-2013:0587 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
openSUSE: Security Advisory for java-1_6_0-openjdk (openSUSE-SU-2013:0378-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SuSE Update for java-1_6_0-openjdk openSUSE-SU-2013:0378-1 (java-1_6_0-openjdk)
Check for the Version of java-160-openjdk OpenVAS Vulnerability Test $Id: gbsuse201303781.nasl 8672 2018-02-05 16:39:18Z teissa $ SuSE Update for java-160-openjdk openSUSE-SU-2013:0378-1 java-160-openjdk Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH,...
SuSE Update for java-1_6_0-openjdk openSUSE-SU-2013:0375-1 (java-1_6_0-openjdk)
Check for the Version of java-160-openjdk OpenVAS Vulnerability Test $Id: gbsuse201303751.nasl 8672 2018-02-05 16:39:18Z teissa $ SuSE Update for java-160-openjdk openSUSE-SU-2013:0375-1 java-160-openjdk Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH,...
Fedora 17 : openssl-1.0.0k-1.fc17 (2013-2793)
Multiple security and bug fixes update from upstream. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora Update for openssl FEDORA-2013-2834
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Ubuntu: Security Advisory (USN-1732-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for openssl FEDORA-2013-2834
Check for the Version of openssl OpenVAS Vulnerability Test Fedora Update for openssl FEDORA-2013-2834 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
RHEL 5 / 6 : openssl (RHSA-2013:0587)
The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0587 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols, as well as a...
RedHat Update for openssl RHSA-2013:0587-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Scientific Linux Security Update : openssl on SL5.x, SL6.x i386/x86_64 (20130304)
It was discovered that OpenSSL leaked timing information when decrypting TLS/SSL and DTLS protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL or DTLS server as a paddi...
gnutls: TLS CBC padding timing attack (lucky-13)
The TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks...
Important: java-1.6.0-openjdk
Issue Overview: An improper permission check issue was discovered in the JMX component in OpenJDK. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions. CVE-2013-1486 It was discovered that OpenJDK leaked timing information when decrypting TLS/SSL protoc...
USN-1732-2: OpenSSL regression
USN-1732-1 fixed vulnerabilities in OpenSSL. The fix for CVE-2013-0169 and CVE-2012-2686 introduced a regression causing decryption failures on hardware supporting AES-NI. This update temporarily reverts the security fix pending further investigation. We apologize for the inconvenience. Original...
Security fix for the ALT Linux 9 package openssl10 version 1.0.0k-alt1
Feb. 27, 2013 Dmitry V. Levin 1.0.0k-alt1 - Updated to OpenSSL100k-15-g0e05f88 fixes CVE-2013-0166 and CVE-2013-0169...
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.0k-alt1
Feb. 27, 2013 Dmitry V. Levin 1.0.0k-alt1 - Updated to OpenSSL100k-15-g0e05f88 fixes CVE-2013-0166 and CVE-2013-0169...
Security fix for the ALT Linux 7 package openssl10 version 1.0.0k-alt1
Feb. 27, 2013 Dmitry V. Levin 1.0.0k-alt1 - Updated to OpenSSL100k-15-g0e05f88 fixes CVE-2013-0166 and CVE-2013-0169...