Scientific Linux Security Update : openssl on SL6.x i386/x86_64 (20140108)

A flaw was found in the way OpenSSL determined which hashing algorithm to use when TLS protocol version 1.2 was enabled. This could possibly cause OpenSSL to use an incorrect hashing algorithm, leading to a crash of an application using the library. CVE-2013-6449 It was discovered that the Datagr...

Ubuntu 12.04 LTS / 12.10 / 13.04 / 13.10 : openssl vulnerabilities (USN-2079-1)

Anton Johansson discovered that OpenSSL incorrectly handled certain invalid TLS handshakes. A remote attacker could use this issue to cause OpenSSL to crash, resulting in a denial of service. CVE-2013-4353 Ron Barber discovered that OpenSSL used an incorrect data structure to obtain a version...

CentOS Update for openssl CESA-2014:0015 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 6 : openssl (ELSA-2014-0015)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0015 advisory. - fix CVE-2013-4353 - Invalid TLS handshake crash - fix CVE-2013-6450 - possible MiTM attack on DTLS1 Tenable has extracted the preceding description...

CentOS 6 : openssl (CESA-2014:0015)

Updated openssl packages that fix three security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

openssl security update

1.0.1e-16.4 - fix CVE-2013-4353 - Invalid TLS handshake crash 1.0.1e-16.3 - fix CVE-2013-6450 - possible MiTM attack on DTLS1 1.0.1e-16.2 - fix CVE-2013-6449 - crash when version in SSL structure is incorrect...

OpenSSL 1.0.0 < 1.0.0l Vulnerability

The version of OpenSSL installed on the remote host is prior to 1.0.0l. It is, therefore, affected by a vulnerability as referenced in the 1.0.0l advisory. - The DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f does not properly maintain data structures fo...

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1f-alt1

Jan. 6, 2014 Dmitry V. Levin 1.0.1f-alt1 - Updated to 1.0.1f fixes CVE-2013-4353, CVE-2013-6449, and CVE-2013-6450...

Security fix for the ALT Linux 8 package openssl10 version 1.0.1f-alt1

Jan. 6, 2014 Dmitry V. Levin 1.0.1f-alt1 - Updated to 1.0.1f fixes CVE-2013-4353, CVE-2013-6449, and CVE-2013-6450...

Security fix for the ALT Linux 7 package openssl10 version 1.0.1f-alt1

Jan. 6, 2014 Dmitry V. Levin 1.0.1f-alt1 - Updated to 1.0.1f fixes CVE-2013-4353, CVE-2013-6449, and CVE-2013-6450...

Debian DSA-2833-1 : openssl - several vulnerabilities

Multiple security issues have been fixed in OpenSSL: The TLS 1.2 support was susceptible to denial of service and retransmission of DTLS messages was fixed. In addition this update disables the insecure DualECDRBG algorithm which was unused anyway, see...

CVE-2013-6450

CVE-2013-6450 affects OpenSSL DTLS retransmission handling. The vulnerability arises from improper maintenance of digest/encryption context data structures during DTLS retransmission, in particular related to ssl/d1_both.c and ssl/t1_enc.c, which can allow a remote attacker to trigger a crash of ...

[SECURITY] [DSA 2833-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2833-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 01, 2014 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2833-1 (openssl - several vulnerabilities)

Multiple security issues have been fixed in OpenSSL: The TLS 1.2 support was susceptible to denial of service and retransmission of DTLS messages was fixed. In addition this update disables the insecure DualECDRBG algorithm which was unused anyway, see...

Vulnerability in OpenSSL CVE-2013-6450

A flaw in DTLS handling can cause an application using OpenSSL and DTLS to crash. This is not a vulnerability for OpenSSL prior to 1.0.0. Found by Dmitry Sobinov...

CentOS 4 / 5 : wireshark (CESA-2008:0058)

Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously...

CVE-2008-6450

Cross-site scripting XSS vulnerability in Under Construction, Baby UCB PC2M 0.9.22.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2008-6450

CVE-2008-6450 describes a cross-site scripting (XSS) vulnerability in the web application PC2M (Under Construction, Baby, UCB) , version 0.9.22.4 and earlier . The impact, as documented by multiple sources, is that an attacker could cause a user’s browser to execute arbitrary script or HTML; no s...

CVE-2008-6450

Cross-site scripting XSS vulnerability in Under Construction, Baby UCB PC2M 0.9.22.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

RedHat Update for wireshark RHSA-2008:0059-01

Check for the Version of wireshark OpenVAS Vulnerability Test RedHat Update for wireshark RHSA-2008:0059-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...