236 matches found
SUSE-SU-2020:3721-1 Security update for openssl-1_1
This update for openssl-11 fixes the following issues: - CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME bsc1179491...
SUSE-SU-2020:3720-1 Security update for openssl-1_1
This update for openssl-11 fixes the following issues: - CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME bsc1179491...
CLSA-2020-1608724134 Fix CVE: CVE-2020-1971
EDIPARTYNAME NULL pointer de-reference CVE-2020-1971...
Fix CVE: CVE-2020-1971
EDIPARTYNAME NULL pointer de-reference CVE-2020-1971...
Important: openssl
Issue Overview: A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERALNAMEcmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to...
SUSE SLED15 / SLES15 Security Update : openssl-1_1 (SUSE-SU-2020:3721-1)
This update for openssl-11 fixes the following issues : CVE-2020-1971: Fixed a NULL pointer dereference in EDIPARTYNAME bsc1179491. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically cle...
Amazon Linux AMI : openssl (ALAS-2020-1456)
The version of openssl installed on the remote host is prior to 1.0.2k-16.152. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1456 advisory. A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERALNAMEcmp...
SUSE SLES15 Security Update : openssl-1_1 (SUSE-SU-2020:3722-1)
This update for openssl-11 fixes the following issues : CVE-2020-1971: Fixed a NULL pointer dereference in EDIPARTYNAME bsc1179491. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically cle...
Amazon Linux 2 : openssl, openssl11 (ALAS-2020-1573)
The version of openssl installed on the remote host is prior to 1.0.2k-19. The version of openssl11 installed on the remote host is prior to 1.1.1c-15. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1573 advisory. A null pointer dereference flaw was found in openssl...
SUSE SLED15 / SLES15 Security Update : openssl-1_1 (SUSE-SU-2020:3720-1)
This update for openssl-11 fixes the following issues : CVE-2020-1971: Fixed a NULL pointer dereference in EDIPARTYNAME bsc1179491. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically cle...
Important: openssl, openssl11
Issue Overview: A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERALNAMEcmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to...
Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1i-alt1
1.1.1i-alt1 built Dec. 9, 2020 Gleb Fotengauer-Malinovskiy in task 263105 Dec. 8, 2020 Gleb Fotengauer-Malinovskiy - Updated to 1.1.1i fixes CVE-2020-1971...
Debian DSA-4807-1 : openssl - security update
David Benjamin discovered a flaw in the GENERALNAMEcmp function which could cause a NULL dereference, resulting in denial of service. Additional details can be found in the upstream advisory: https://www.openssl.org/news/secadv/20201208.txt C Tenable Network Security, Inc. The descriptive text an...
CVE-2020-1971
creationtimestamp| type| source ---|---|--- 2020-12-08 18:31:05+00:00| seen| https://t.me/cibsecurity/17247 2020-12-09 18:12:15+00:00| seen| https://t.me/BleepingComputer/8716 2020-12-11 17:58:42+00:00| seen| https://t.me/informationsecuritychannel/42229 2023-12-17 23:18:53+00:00| seen|...
CVE-2020-1971 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2020-1971 EDIPARTYNAME NULL pointer dereference
The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERALNAMEcmp which compares different instances of a GENERALNAME to see if they are equal or not. This function behaves incorrect...
CVE-2020-1971
CVE-2020-1971 is described across multiple connected sources as a NULL-dereference in OpenSSL’s GENERAL_NAME_cmp when EDIPARTYNAME is present, potentially enabling a denial-of-service crash. Affected OpenSSL versions include all 1.1.1 and 1.0.2 lines; fixes are published in OpenSSL 1.1.1i and Ope...
[SECURITY] [DSA 4807-1] openssl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4807-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 08, 2020 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4807-1] openssl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4807-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 08, 2020 https://www.debian.org/security/faq -...
CVE-2020-1971
The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERALNAMEcmp which compares different instances of a GENERALNAME to see if they are equal or not. This function behaves incorrect...