237 matches found
Integer overflow
Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer overflow attacks, and cause a denial of service memory corruption or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an...
OpenSSL Releases New Fix for CVE-2012-2110 ASN1 Bug
The OpenSSL developers have had to re-release the fix for a serious vulnerability in the softwareās ASN.1 implementation that could allow an attacker to cause a denial of service or potentially run arbitrary code on a remote machine. The updated fix only applies to version 0.9.8v; all of the othe...
OpenSSL 0.9.8 < 0.9.8v Vulnerability
The version of OpenSSL installed on the remote host is prior to 0.9.8v. It is, therefore, affected by a vulnerability as referenced in the 0.9.8v advisory. - The asn1d2ireadbio function in crypto/asn1/ad2ifp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properl...
Vulnerability in OpenSSL - ASN1 BIO incomplete fix
It was discovered that the fix for CVE-2012-2110 released on 19 Apr 2012 was not sufficient to correct the issue for OpenSSL 0.9.8. This issue only affects OpenSSL 0.9.8v. OpenSSL 1.0.1a and 1.0.0i already contain a patch sufficient to correct CVE-2012-2110. Found by Red Hat...
OpenSSL "asn1_d2i_read_bio()" DERę ¼å¼ę°ę®å¤ēę¼ę“
BUGTRAQ ID: 53158 CVE ID: CVE-2012-2110 OpenSSLęÆäøē§å¼ę¾ęŗē ēSSLå®ē°ļ¼ēØę„å®ē°ē½ē»éäæ”ēé«å¼ŗåŗ¦å åÆļ¼ē°åØč¢«å¹æę³å°ēØäŗåē§ē½ē»åŗēØēØåŗäøć OpenSSLåØå¤ēDERę ¼å¼ę°ę®ę¶ļ¼ "asn1d2ireadbio"å½ę°äøååØē±»åč½¬ę¢éčÆÆļ¼åÆč¢«å©ēØé ęå ē¼å²åŗęŗ¢åŗļ¼åƼč“ę§č”ä»»ę代ē ćęåå©ēØēå¹³å°äøŗ64ä½ē³»ē»ć 0 OpenSSL 1.x OpenSSL 0.x åå蔄äøļ¼ OpenSSL Project --------------- OpenSSL Projectå·²ē»äøŗę¤ååøäŗäøäøŖå®å Øå ¬åļ¼secadv20120419ļ¼ä»„åēøåŗ蔄äø:...
[SECURITY] [DSA 2454-1] openssl security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2454-1 [email protected] http://www.debian.org/security/ Raphael Geissert April 19, 2012 http://www.debian.org/security/faq -...
OpenSSL 1.0.1 ASN1 BIO Vulnerability
Exploit for multiple platform in category remote exploits OpenSSL Security Advisory 19 Apr 2012 ======================================= ASN1 BIO vulnerability CVE-2012-2110 ======================================= A potentially exploitable vulnerability has been discovered in the OpenSSL function...
OpenSSL 1.0.1 Memory Corruption
Exploit for multiple platform in category remote exploits Incorrect integer conversions in OpenSSL can result in memory corruption. -------------------------------------------------------------------------- CVE-2012-2110 This advisory is intended for system administrators and developers exposing...
Debian DSA-2454-2 : openssl - multiple vulnerabilities
Multiple vulnerabilities have been found in OpenSSL. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2012-0884 Ivan Nestlerode discovered a weakness in the CMS and PKCS 7 implementations that could allow an attacker to decrypt data via a Million Message...
Ubuntu: Security Advisory (USN-1424-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-1424-1: OpenSSL vulnerabilities
It was discovered that OpenSSL could be made to dereference a NULL pointer when processing S/MIME messages. A remote attacker could use this to cause a denial of service. These issues did not affect Ubuntu 8.04 LTS. CVE-2006-7250, CVE-2012-1165 Tavis Ormandy discovered that OpenSSL did not proper...
CVE-2012-2110
OpenSSL CVE-2012-2110 is a buffer overflow in asn1_d2i_read_bio (DER parsing) that can cause memory corruption or DoS via crafted DER data (e.g., X.509 certs or RSA keys). Affected releases include OpenSSL 0.9.8v, 0.9.8.x prior to 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a. Public advis...
Security fix for the ALT Linux 7 package openssl10 version 1.0.0i-alt1
April 19, 2012 Dmitry V. Levin 1.0.0i-alt1 - Updated to 1.0.0i fixes CVE-2012-2110...
OpenSSL - ASN1 BIO Memory Corruption
OpenSSL - ASN1 BIO Memory Corruption Incorrect integer conversions in OpenSSL can result in memory corruption. -------------------------------------------------------------------------- CVE-2012-2110 This advisory is intended for system administrators and developers exposing OpenSSL in production...
Security fix for the ALT Linux 6 package openssl10 version 1.0.0i-alt1
April 19, 2012 Dmitry V. Levin 1.0.0i-alt1 - Updated to 1.0.0i fixes CVE-2012-2110...
Security fix for the ALT Linux 9 package openssl10 version 1.0.0i-alt1
April 19, 2012 Dmitry V. Levin 1.0.0i-alt1 - Updated to 1.0.0i fixes CVE-2012-2110...
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.0i-alt1
April 19, 2012 Dmitry V. Levin 1.0.0i-alt1 - Updated to 1.0.0i fixes CVE-2012-2110...
OpenSSL 1.0.1 < 1.0.1a Vulnerability
The version of OpenSSL installed on the remote host is prior to 1.0.1a. It is, therefore, affected by a vulnerability as referenced in the 1.0.1a advisory. - The asn1d2ireadbio function in crypto/asn1/ad2ifp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properl...
OpenSSL ASN1 BIO Memory Corruption Vulnerability
Exploit for windows platform in category dos / poc Incorrect integer conversions in OpenSSL can result in memory corruption. -------------------------------------------------------------------------- CVE-2012-2110 This advisory is intended for system administrators and developers exposing OpenSSL...