Security fix for the ALT Linux 8 package openssl10 version 1.0.1k-alt3

June 15, 2015 Gleb Fotengauer-Malinovskiy 1.0.1k-alt3 - Fixed CVE-2015-1789, CVE-2015-1790, CVE-2015-1791, CVE-2015-1792, CVE-2015-0209, CVE-2015-4000...

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1k-alt3

June 15, 2015 Gleb Fotengauer-Malinovskiy 1.0.1k-alt3 - Fixed CVE-2015-1789, CVE-2015-1790, CVE-2015-1791, CVE-2015-1792, CVE-2015-0209, CVE-2015-4000...

Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt3

June 15, 2015 Gleb Fotengauer-Malinovskiy 1.0.1k-alt3 - Fixed CVE-2015-1789, CVE-2015-1790, CVE-2015-1791, CVE-2015-1792, CVE-2015-0209, CVE-2015-4000...

[USN-2639-1] OpenSSL vulnerabilities

========================================================================== Ubuntu Security Notice USN-2639-1 June 11, 2015 openssl vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

CVE-2015-1791

Race condition in the ssl3getnewsessionticket function in ssl/s3clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b, when used for a multi-threaded client, allows remote attackers to cause a denial of service double free and application crash or...

CVE-2015-1791

CVE-2015-1791 describes a race condition in OpenSSL’s handling of NewSessionTicket for multi‑threaded clients, potentially causing a double free of ticket data and a denial of service (crash). The initial OpenSSL description lists vulnerable versions up to 0.9.8zg, 1.0.0 up through 1.0.0s, 1.0.1 ...

OpenSSL 0.9.8 < 0.9.8zg Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 0.9.8zg. It is, therefore, affected by multiple vulnerabilities as referenced in the 0.9.8zg advisory. - The dofreeupto function in crypto/cms/cmssmime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2...

CVE-2015-1791

Race condition in the ssl3getnewsessionticket function in ssl/s3clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b, when used for a multi-threaded client, allows remote attackers to cause a denial of service double free and application crash or...

OpenSSL 1.0.2 < 1.0.2b Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.0.2b. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.2b advisory. - The dofreeupto function in crypto/cms/cmssmime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2...

Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : openssl (SSA:2015-162-01)

New openssl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2015-162-01. The text...

FreeBSD : openssl -- multiple vulnerabilities (8305e215-1080-11e5-8ba2-000c2980a9f3) (Logjam)

The OpenSSL team reports : - Missing DHE man-in-the-middle protection Logjam CVE-2015-4000 - Malformed ECParameters causes infinite loop CVE-2015-1788 - Exploitable out-of-bounds read in X509cmptime CVE-2015-1789 - PKCS7 crash with missing EnvelopedContent CVE-2015-1790 - CMS verify infinite loop...

FreeBSD-SA-15:10.openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-15:10.openssl Security Advisory The FreeBSD Project Topic: Multiple OpenSSL vulnerabilities Category: contrib Module: openssl Announced: 2015-06-12 Affects: All...

[slackware-security] openssl

New openssl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/openssl-1.0.1n-i486-1slack14.1.txz: Upgraded. Fixes several bugs and security issues: o Malformed...

CVE-2015-1791

Race condition in the ssl3getnewsessionticket function in ssl/s3clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b, when used for a multi-threaded client, allows remote attackers to cause a denial of service double free and application crash or...

CVE-2014-1791

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2014-1791

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2014-1791

CVE-2014-1791 is a memory‑corruption vulnerability in Microsoft Internet Explorer 7–11 that allows remote code execution when a user visits a crafted webpage. The issue affects IE versions 7 through 11 and is the Internet Explorer Memory Corruption Vulnerability described in the public advisories...

Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-1791)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

CentOS Update for nspr CESA-2013:1791 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 6 : squid (ELSA-2011-1791)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2011-1791 advisory. -7:3.1.10-1.el62.1 - Resolves: 755016 - CVE-2011-4096: Invalid free by processing CNAME DNS record Tenable has extracted the preceding description block directl...