168 matches found
CVE-2001-0798
CVE-2001-0798 entry is rejected: this CVE ID is not used and does not represent an active vulnerability.
CVE-2003-0798
CVE-2003-0798 entry is rejected/not used and does not represent an active vulnerability.
Oracle MySQL Server 5.6 <= 5.6.29 / 5.7 <= 5.7.11 Security Update (cpuapr2016v3) - Windows
Oracle MySQL Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[slackware-security] openssl
New openssl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/openssl-1.0.1s-i486-1slack14.1.txz: Upgraded. This update fixes the following security issues: Cross-protoc...
CVE-2016-0798
CVE-2016-0798 is a memory‑leak vulnerability in OpenSSL’s SRP_VBASE_get_by_user() during SRP user lookups. An attacker using an invalid username could leak memory (~300 bytes per connection), leading to DoS. Public docs reference OpenSSL fixes (openssl_fix18) and affected lines for 1.0.1/1.0.2 se...
CVE-2016-0798
Memory leak in the SRPVBASEgetbyuser implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service memory consumption by providing an invalid username in a connection attempt, related to apps/sserver.c and crypto/srp/srpvfy.c...
openSUSE Security Update : openssl (openSUSE-2016-289) (DROWN)
This update for openssl fixes various security issues : Security issues fixed : - CVE-2016-0800 aka the 'DROWN' attack bsc968046: OpenSSL was vulnerable to a cross-protocol attack that could lead to decryption of TLS sessions by using a server supporting SSLv2 and EXPORT cipher suites as a...
openSUSE Security Update : openssl (openSUSE-2016-288) (DROWN)
This update for openssl fixes the following issues : Security issues fixed : - CVE-2016-0800 aka the 'DROWN' attack bsc968046: OpenSSL was vulnerable to a cross-protocol attack that could lead to decryption of TLS sessions by using a server supporting SSLv2 and EXPORT cipher suites as a...
Security update for openssl (important)
This update for openssl fixes various security issues: Security issues fixed: - CVE-2016-0800 aka the "DROWN" attack bsc968046: OpenSSL was vulnerable to a cross-protocol attack that could lead to decryption of TLS sessions by using a server supporting SSLv2 and EXPORT cipher suites as a...
OpenSSL 1.0.1 < 1.0.1s Multiple Vulnerabilities
The version of OpenSSL installed on the remote host is prior to 1.0.1s. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.1s advisory. - The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a...
Security fix for the ALT Linux 7 package openssl10 version 1.0.1s-alt0.M70P.1
1.0.1s-alt0.M70P.1 built March 2, 2016 Gleb Fotengauer-Malinovskiy in task 160363 March 1, 2016 Gleb Fotengauer-Malinovskiy - Updated to v1.0.1s fixes CVE-2016-0701 CVE-2016-0702 CVE-2016-0705 CVE-2016-0797 CVE-2016-0798 CVE-2016-0799 CVE-2016-0800...
SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2016:0620-1) (DROWN)
This update for openssl fixes various security issues : Security issues fixed : - CVE-2016-0800 aka the 'DROWN' attack bsc968046: OpenSSL was vulnerable to a cross-protocol attack that could lead to decryption of TLS sessions by using a server supporting SSLv2 and EXPORT cipher suites as a...
SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2016:0617-1) (DROWN)
This update for openssl fixes various security issues and bugs : Security issues fixed : - CVE-2016-0800 aka the 'DROWN' attack bsc968046: OpenSSL was vulnerable to a cross-protocol attack that could lead to decryption of TLS sessions by using a server supporting SSLv2 and EXPORT cipher suites as...
USN-2914-1: OpenSSL vulnerabilities
Yuval Yarom, Daniel Genkin, and Nadia Heninger discovered that OpenSSL was vulnerable to a side-channel attack on modular exponentiation. On certain CPUs, a local attacker could possibly use this issue to recover RSA keys. This flaw is known as CacheBleed. CVE-2016-0702 Adam Langley discovered th...
Security fix for the ALT Linux 8 package openssl10 version 1.0.2g-alt1
March 1, 2016 Gleb Fotengauer-Malinovskiy 1.0.2g-alt1 - Updated to 1.0.2g fixes CVE-2016-0701 CVE-2016-0702 CVE-2016-0705 CVE-2016-0797 CVE-2016-0798 CVE-2016-0799 CVE-2016-0800. - Added default ciphers to system profile...
Security fix for the ALT Linux 9 package openssl10 version 1.0.2g-alt1
March 1, 2016 Gleb Fotengauer-Malinovskiy 1.0.2g-alt1 - Updated to 1.0.2g fixes CVE-2016-0701 CVE-2016-0702 CVE-2016-0705 CVE-2016-0797 CVE-2016-0798 CVE-2016-0799 CVE-2016-0800. - Added default ciphers to system profile...
Oracle: Security Advisory (ELSA-2009-0474)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-0798
CVE-2015-0798 affects Mozilla Firefox where Reader mode on Android and Desktop Firefox pre-release mishandles privileged URLs, enabling remote JavaScript execution with chrome privileges by bypassing the Same Origin Policy. Affected: Firefox before 37.0.1 (Android) and pre-release desktop builds....