1955 matches found
Debian Security Advisory DSA 2896-1 (openssl - security update)
A vulnerability has been discovered in OpenSSL OpenVAS Vulnerability Test $Id: deb2896.nasl 9136 2018-03-19 13:08:02Z cfischer $ Auto-generated from advisory DSA 2896-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2015 Greenbone Networks GmbH...
CVE-2014-0160
The 1 TLS and 2 DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys,...
CVE-2014-0160
CVE-2014-0160 (Heartbleed) is an information-disclosure vulnerability in OpenSSL’s TLS/DTLS heartbeat implementation. Affected: OpenSSL 1.0.1 before 1.0.1g. Root cause: improper handling of the Heartbeat extension (d1_both.c, t1_lib.c) leading to a buffer over-read, enabling an attacker to read m...
Debian: Security Advisory (DSA-2896-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OpenSSL DTLS Retransmission Denial of Service (CVE-2013-6450)
A use after free vulnerability has been reported in OpenSSL's handling of DTLS. The flaw is due to the clearing of DTLS context variable prior to a retransmission. This could lead to the OpenSSL application crashing resulting in a denial of service condition. A remote attacker could exploit this...
[SECURITY] Fedora 20 Update: gnutls-3.1.20-4.fc20
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...
[SECURITY] Fedora 19 Update: gnutls-3.1.20-4.fc19
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...
Multiple OpenSSL vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Tues Feb 25 14:07:48 CDT 2014 | Updated: Mon Mar 3 11:46:39 CDT 2014 | Update: Clarified vulnerable filesets The most recent version of this document is available here:...
Fedora 20 : mingw-gnutls-3.1.21-1.fc20 (2014-2583)
Version 3.1.21 released 2014-02-13 - libgnutls: Tolerate servers that sent the SUPPORTED ECC extension. - libgnutls: Reduced the TLS and DTLS version requirements for all ciphersuites that are not GCM. - libgnutls: When two initial keywords are specified then treat the second as having the '+'...
[SECURITY] Fedora 19 Update: gnutls-3.1.20-3.fc19
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...
Fedora Update for gnutls FEDORA-2014-2580
Check for the Version of gnutls OpenVAS Vulnerability Test Fedora Update for gnutls FEDORA-2014-2580 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
[SECURITY] Fedora 20 Update: gnutls-3.1.20-3.fc20
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...
RedHat Update for openssl RHSA-2014:0015-01
Check for the Version of openssl OpenVAS Vulnerability Test RedHat Update for openssl RHSA-2014:0015-01 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
RedHat Update for openssl RHSA-2014:0015-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mandriva Linux Security Advisory : openssl (MDVSA-2014:007)
A vulnerability has been discovered and corrected in openssl : The DTLS retransmission implementation in OpenSSL through 0.9.8y and 1.x through 1.0.1e does not properly maintain data structures for digest and encryption contexts, which might allow man-in-the-middle attackers to trigger the use of...
ESXi 5.1 < Build 1483097 Multiple Vulnerabilities (remote check)
The remote VMware ESXi 5.1 host is affected by the following vulnerabilities : - A denial of service vulnerability exists in the bundled OpenSSL library that is triggered when handling OCSP response verification. A remote attacker can exploit this to crash the program. CVE-2013-0166 - An error...
Updated openssl package fixes security vulnerabilities
Updated openssl packages fix security vulnerabilities: The DTLS retransmission implementation in OpenSSL through 1.0.1e does not properly maintain data structures for digest and encryption contexts, which might allow man-in-the-middle attackers to trigger the use of a different context by...
Fedora 18 : openssl-1.0.1e-37.fc18 (2014-0474)
Security update fixing segfaults in DTLS and TLS implementation. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...
Fedora 19 : openssl-1.0.1e-37.fc19 (2014-0456)
Security update fixing segfaults in DTLS and TLS implementation. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...
Fedora 20 : openssl-1.0.1e-37.fc20 (2014-0476)
Security update fixing segfaults in DTLS and TLS implementation. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...