110 matches found
openSUSE Security Update : OpenSSL (openSUSE-SU-2014:0592-1)
A use-after-free race condition in OpenSSL's read buffer was fixed that could cause connections to drop CVE-2010-5298. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-325. The te...
ESXi 5.5 < Build 1881737 OpenSSL Library Multiple Vulnerabilities (remote check)
The remote VMware ESXi host is 5.5 prior to build 1881737. It is, therefore, affected by the following vulnerabilities in the OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into other sessions or allow denial of service attacks. Note this...
VMSA-2014-0006 : VMware product updates address OpenSSL security vulnerabilities
a. OpenSSL update for multiple products. OpenSSL libraries have been updated in multiple products to versions 0.9.8za and 1.0.1h in order to resolve multiple security issues. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2014-0224, CVE-2014-0198,...
VMware product updates address OpenSSL security vulnerabilities
a. OpenSSL update for multiple products. OpenSSL libraries have been updated in multiple products to versions 0.9.8za and 1.0.1h in order to resolve multiple security issues. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2014-0224, CVE-2014-0198,...
stunnel < 5.02 OpenSSL Multiple Vulnerabilities
The version of stunnel installed on the remote host is prior to version 5.02. It is, therefore, affected by the following vulnerabilities : - An error exists in the ssl3readbytes function that allows data to be injected into other sessions or allows denial of service attacks. Note this issue is...
RedHat Update for openssl RHSA-2014:0625-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
AIX OpenSSL Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Fri Jun 6 05:44:06 CDT 2014 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory8.asc...
CentOS 6 : openssl (CESA-2014:0625)
Updated openssl packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...
Important: Red Hat Security Advisory: rhev-hypervisor6 security update
An updated rhev-hypervisor6 package that fixes two security issues is now available. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for each...
Security fix for the ALT Linux 8 package openssl10 version 1.0.1h-alt1
June 5, 2014 Dmitry V. Levin 1.0.1h-alt1 - Updated to 1.0.1h fixes CVE-2014-0224, CVE-2014-022, CVE-2014-019, CVE-2014-347, and CVE-2010-5298...
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1h-alt1
June 5, 2014 Dmitry V. Levin 1.0.1h-alt1 - Updated to 1.0.1h fixes CVE-2014-0224, CVE-2014-022, CVE-2014-019, CVE-2014-347, and CVE-2010-5298...
Security fix for the ALT Linux 7 package openssl10 version 1.0.1h-alt1
1.0.1h-alt1 built June 5, 2014 Dmitry V. Levin in task 120905 June 5, 2014 Dmitry V. Levin - Updated to 1.0.1h fixes CVE-2014-0224, CVE-2014-022, CVE-2014-019, CVE-2014-347, and CVE-2010-5298...
Security fix for the ALT Linux 9 package openssl10 version 1.0.1h-alt1
June 5, 2014 Dmitry V. Levin 1.0.1h-alt1 - Updated to 1.0.1h fixes CVE-2014-0224, CVE-2014-022, CVE-2014-019, CVE-2014-347, and CVE-2010-5298...
OpenSSL 'ChangeCipherSpec' MiTM Potential Vulnerability
The OpenSSL service on the remote host is potentially vulnerable to a man-in-the-middle MiTM attack, based on its response to two consecutive 'ChangeCipherSpec' messages during the incorrect phase of an SSL/TLS handshake. This flaw could allow a MiTM attacker to decrypt or forge SSL messages by...
Mandriva Linux Security Advisory : openssl (MDVSA-2014:090)
Updated openssl packages fix security vulnerability : A read buffer can be freed even when it still contains data that is used later on, leading to a use-after-free. Given a race condition in a multi-threaded application it may permit an attacker to inject data from one connection into another or...
Ubuntu: Security Advisory (USN-2192-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for drupal6 FEDORA-2014-5298
Check for the Version of drupal6 OpenVAS Vulnerability Test Fedora Update for drupal6 FEDORA-2014-5298 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for drupal7 FEDORA-2014-5298
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2014-0187 Updated openssl packages fix CVE-2010-5298
Updated openssl packages fix security vulnerability: A read buffer can be freed even when it still contains data that is used later on, leading to a use-after-free. Given a race condition in a multi-threaded application it may permit an attacker to inject data from one connection into another or...
FreeBSD : OpenSSL -- Remote Data Injection / DoS (0b8d7194-ca88-11e3-9d8d-c80aa9043978)
Applications that use SSLMODERELEASEBUFFERS, such as nginx, are prone to a race condition which may allow a remote attacker to inject random data into other connections. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...