185 matches found
openSUSE Security Update : openssl (openSUSE-2016-564)
This update for openssl fixes the following issues : - CVE-2016-2108: Memory corruption in the ASN.1 encoder bsc977617 - CVE-2016-2107: Padding oracle in AES-NI CBC MAC check bsc977616 - CVE-2016-2105: EVPEncodeUpdate overflow bsc977614 - CVE-2016-2106: EVPEncryptUpdate overflow bsc977615 -...
Security update for libopenssl0_9_8 (important)
This update for libopenssl098 fixes the following issues: - CVE-2016-2105: EVPEncodeUpdate overflow bsc977614 - CVE-2016-2106: EVPEncryptUpdate overflow bsc977615 - CVE-2016-2108: Memory corruption in the ASN.1 encoder bsc977617 - CVE-2016-2109: ASN.1 BIO excessive memory allocation bsc976942 -...
Security update for libopenssl0_9_8 (important)
This update for libopenssl098 fixes the following issues: - CVE-2016-2105: EVPEncodeUpdate overflow bsc977614 - CVE-2016-2106: EVPEncryptUpdate overflow bsc977615 - CVE-2016-2108: Memory corruption in the ASN.1 encoder bsc977617 - CVE-2016-2109: ASN.1 BIO excessive memory allocation bsc976942 -...
Security update for openssl (important)
This update for openssl fixes the following issues: - CVE-2016-2108: Memory corruption in the ASN.1 encoder boo977617 - CVE-2016-2107: Padding oracle in AES-NI CBC MAC check boo977616 - CVE-2016-2105: EVPEncodeUpdate overflow boo977614 - CVE-2016-2106: EVPEncryptUpdate overflow boo977615 -...
CVE-2016-2105
Integer overflow in the EVPEncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service heap memory corruption via a large amount of binary data...
CVE-2016-2105
Integer overflow in the EVPEncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service heap memory corruption via a large amount of binary data...
BELL-CVE-2016-2105 CVE-2016-2105 does not affect BellSoft software
Bulletin has no description...
CVE-2016-2105
Integer overflow in the EVPEncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service heap memory corruption via a large amount of binary data...
Fedora 23 : openssl-1.0.2h-1.fc23 (2016-05c567df1a)
Security fix for CVE-2016-2108, CVE-2016-2107, CVE-2016-2105, CVE-2016-2106 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introduci...
Debian DSA-3566-1 : openssl - security update
Several vulnerabilities were discovered in OpenSSL, a Secure Socket Layer toolkit. - CVE-2016-2105 Guido Vranken discovered that an overflow can occur in the function EVPEncodeUpdate, used for Base64 encoding, if an attacker can supply a large amount of data. This could lead to a heap corruption....
CVE-2016-2105
Integer overflow in the EVPEncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service heap memory corruption via a large amount of binary data...
CVE-2016-2105
CVE-2016-2105 concerns OpenSSL: an overflow in EVP_EncodeUpdate can cause a heap memory corruption and denial of service when processing large amounts of data. The connected OpenSSL advisories confirm the vulnerability and cite fixes for versions 1.0.1t and 1.0.2h (backported fixes for earlier 0....
SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2016:1233-1)
This update for openssl fixes the following issues : - CVE-2016-2108: Memory corruption in the ASN.1 encoder bsc977617 - CVE-2016-2107: Padding oracle in AES-NI CBC MAC check bsc977616 - CVE-2016-2105: EVPEncodeUpdate overflow bsc977614 - CVE-2016-2106: EVPEncryptUpdate overflow bsc977615 -...
OpenSSL 1.0.2 < 1.0.2h Multiple Vulnerabilities
The version of OpenSSL installed on the remote host is prior to 1.0.2h. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.2h advisory. - The X509NAMEoneline function in crypto/x509/x509obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to...
Ubuntu: Security Advisory (USN-2959-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security fix for the ALT Linux 7 package openssl10 version 1.0.1t-alt0.M70P.1
1.0.1t-alt0.M70P.1 built May 4, 2016 Gleb Fotengauer-Malinovskiy in task 164219 May 3, 2016 Gleb Fotengauer-Malinovskiy - Updated to 1.0.1t fixes CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2109 CVE-2016-2176...
Security fix for the ALT Linux 8 package openssl10 version 1.0.2h-alt1
1.0.2h-alt1 built May 4, 2016 Gleb Fotengauer-Malinovskiy in task 164216 May 3, 2016 Gleb Fotengauer-Malinovskiy - Updated to 1.0.2h fixes CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2109 CVE-2016-2176...
[SECURITY] [DSA 3566-1] openssl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3566-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini May 03, 2016 https://www.debian.org/security/faq -...
SUSE-SU-2016:1206-1 Security update for openssl1
This update for openssl1 fixes the following issues: Security issues fixed: - CVE-2016-2108: Memory corruption in the ASN.1 encoder bsc977617 - CVE-2016-2107: Padding oracle in AES-NI CBC MAC check bsc977616 - CVE-2016-2105: EVPEncodeUpdate overflow bsc977614 - CVE-2016-2106: EVPEncryptUpdate...
