Denial Of Service (DoS) Through Buffer Overflow

OpenSSL is vulnerable to denial of service DoS attacks. These attacks can be triggered by sending invalid DTLS fragments which cause a buffer overrun. This overrun might allow attackers to run arbitrary code...

Denial Of Service (DoS) Through Recursion

OpenSSL is vulnerable to denial of service DoS attacks. These attacks can be made using an invalid DTLS handshake causing OpenSSL to go into a recursive loop...

Denial Of Service (DoS)

OpenSSL is vulnerable to denial of service DoS. A flaw in OpenSSL allows attackers to a double free to occur through DTLS packets...

Denial Of Service (DoS) Through Memory Consumption

OpenSSL is vulnerable to denial of service DoS through memory consumption. This can be triggered through a DTLS handshake method which forces OpenSSL to process a large amount of data, exhausting the memory...

Denial Of Service (DoS) Through Memory Leaks

OpenSSL is vulnerable to denial of service DoS attacks through memory leaks. There is a memory leak which can be triggered by a zero-length fragment in a DTLS packet...

Denial Of Service (DoS) Through Null Pointer Dereference

OpenSSL is vulnerable to denial of service DoS attacks through a null pointer dereference. This can be triggered at remote DTLS servers by a handshake message where the ciphersuite is specified as a 1 anonymous DH or 2 anonymous ECDH ciphersuite...

Denial Of Service (DoS) Through Null Pointer Dereference

OpenSSL is vulnerable to denial of service DoS attacks through a null pointer dereference. This attack can be caused through a DTLS message...

Denial Of Service (DoS) Through Memory Consumption And Application Crash

OpenSSL is vulnerable to denial of service DoS attacks through memory consumption and application crash. This is caused because the dtls1clearqueues function in d1lib.c frees data not taking into account that application data could arrive between the ChangeCipherSpec message and the Finished...

Denial Of Service (DoS)

OpenSSL is vulnerable to denial of service DoS attacks. The library does not clear DTLS handshake messages when they are delivered out of order even when the handshake has been completed. A malicious user can take advantage of this by opening multiple DTLS connections to the system, causing a...

Denial Of Service (DoS)

OpenSSL is vulnerable to Denial of Service DoS attacks. A malicious user can send a new epoch number together with a large sequence number to the server, causing the system to reject additional packets sent via DTLS to the server...

[SECURITY] Fedora 24 Update: gnutls-3.4.17-2.fc24

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...

Tenable Passive Vulnerability Scanner 5.x < 5.2.0 Multiple Vulnerabilities (SWEET32)

The version of Tenable Passive Vulnerability Scanner PVS installed on the remote host is 5.x 5.2.0. It is, therefore, affected by multiple vulnerabilities : - Multiple denial of service vulnerabilities exist in Expat within file xmlparse.c due to a logical error in hash computations. An...

F5 Networks BIG-IP : OpenSSL vulnerability (K23512141)

The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial of service memory consumption by maintaining many crafted DTLS sessions simultaneously, related to...

F5 BIG-IP - OpenSSL vulnerability CVE-2016-2181

The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service false-positive packet drops via spoofed DTLS records, related to reclayerd1...

Amazon Linux: Security Advisory (ALAS-2016-755)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MySQL 5.6.x < 5.6.34 Multiple Vulnerabilities (October 2016 CPU) (SWEET32)

The version of MySQL running on the remote host is 5.6.x prior to 5.6.34. It is, therefore, affected by multiple vulnerabilities : - Multiple integer overflow conditions exist in s3srvr.c, sslsess.c, and t1lib.c due to improper use of pointer arithmetic for heap-buffer boundary checks. An...

MySQL 5.7.x < 5.7.16 Multiple Vulnerabilities (October 2016 CPU) (SWEET32)

The version of MySQL running on the remote host is 5.7.x prior to 5.7.16. It is, therefore, affected by multiple vulnerabilities : - Multiple integer overflow conditions exist in s3srvr.c, sslsess.c, and t1lib.c due to improper use of pointer arithmetic for heap-buffer boundary checks. An...

MySQL 5.6.x < 5.6.34 Multiple Vulnerabilities (October 2016 CPU) (SWEET32)

The version of MySQL running on the remote host is 5.6.x prior to 5.6.34. It is, therefore, affected by multiple vulnerabilities : - Multiple integer overflow conditions exist in s3srvr.c, sslsess.c, and t1lib.c due to improper use of pointer arithmetic for heap-buffer boundary checks. An...

openSUSE Security Update : compat-openssl098 (openSUSE-2016-1189)

This update for compat-openssl098 fixes the following issues : OpenSSL Security Advisory 22 Sep 2016 bsc999665 Severity: High - OCSP Status Request extension unbounded memory growth CVE-2016-6304 bsc999666 Severity: Low - Pointer arithmetic undefined behaviour CVE-2016-2177 bsc982575 - Constant...

Security update for compat-openssl098 (important)

This update for compat-openssl098 fixes the following issues: OpenSSL Security Advisory 22 Sep 2016 bsc999665 Severity: High OCSP Status Request extension unbounded memory growth CVE-2016-6304 bsc999666 Severity: Low Pointer arithmetic undefined behaviour CVE-2016-2177 bsc982575 Constant time fla...