[SECURITY] Fedora 25 Update: gnutls-3.5.13-1.fc25

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...

[SECURITY] Fedora 26 Update: gnutls-3.5.13-1.fc26

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...

openSUSE Security Update : libressl (openSUSE-2017-561)

This update for libressl to version 2.5.1 fixes the following issues : These security issues were fixed : - CVE-2016-0702: Prevent side channel attack on modular exponentiation boo968050. - CVE-2016-7056: Avoid a side-channel cache-timing attack that can leak the ECDSA private keys when signing...

openSUSE Security Update : libressl (openSUSE-2017-560)

This update for libressl to version 2.5.1 fixes the following issues : These security issues were fixed : - CVE-2016-0702: Prevent side channel attack on modular exponentiation boo968050. - CVE-2016-7056: Avoid a side-channel cache-timing attack that can leak the ECDSA private keys when signing...

Internet Bug Bounty: Excessive allocation of memory in dtls1_preprocess_fragment() (CVE-2016-6308)

This issue is very similar to CVE-2016-6307. The underlying defect is different but the security analysis and impacts are the same except that it impacts DTLS. A DTLS message includes 3 bytes for its length in the header for the message. This would allow for messages up to 16Mb in length. Message...

OpenSSL Security Advisory [22 Sept 2016]

The OpenSSL project released an advisory on Sept 22nd, 2016, describing 1 High, 1 Medium and 12 Low severity vulnerabilities, as listed below: OCSP Status Request extension unbounded memory growth CVE-2016-6304 SSLpeek hang on empty record CVE-2016-6305 SWEET32 Mitigation CVE-2016-2183 OOB write ...

CVE-2017-7243

Eclipse tinydtls 0.8.2 for Eclipse IoT allows remote attackers to cause a denial of service DTLS peer crash by sending a "Change cipher spec" packet without pre-handshake...

CVE-2017-7243

Eclipse tinydtls 0.8.2 for Eclipse IoT allows remote attackers to cause a denial of service DTLS peer crash by sending a "Change cipher spec" packet without pre-handshake...

Design/Logic Flaw

Eclipse tinydtls 0.8.2 for Eclipse IoT allows remote attackers to cause a denial of service DTLS peer crash by sending a "Change cipher spec" packet without pre-handshake...

CVE-2017-7243

Eclipse tinydtls 0.8.2 for Eclipse IoT allows remote attackers to cause a denial of service DTLS peer crash by sending a "Change cipher spec" packet without pre-handshake...

CVE-2017-7243

Eclipse tinydtls 0.8.2 for Eclipse IoT is vulnerable to a denial-of-service via a remote attacker sending a Change cipher spec packet without a pre-handshake, causing the DTLS peer to crash. The affected component is the tinydtls library used by Eclipse IoT; the root cause is improper handling of...

PT-2017-17604

Name of the Vulnerable Software and Affected Versions Eclipse tinydtls version 0.8.2 Description The issue allows remote attackers to cause a denial of service by sending a "Change cipher spec" packet without pre-handshake, resulting in a DTLS peer crash. Recommendations For Eclipse tinydtls...

CVE-2017-7243: NULL Pointer Dereference

Eclipse tinydtls 0.8.2 for Eclipse IoT allows remote attackers to cause a denial of service DTLS peer crash by sending a "Change cipher spec" packet without pre-handshake...

RedHat Update for gnutls RHSA-2017:0574-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: gnutls security, bug fix, and enhancement update

An update for gnutls is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Timing Attacks

OpenSSL is vulnerable to timing attacks. The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2 doesn't check MAC addresses in constant time during the processing of a malformed CBC padding. This is also known as the "Lucky Thirteen" issue...

Denial Of Service (DoS) Through Buffer Over-read

OpenSSL is vulnerable to denial of service DoS attacks and possibly other attacks. These attacks are possible because there is an integer underflow when TLS 1.1, TLS 1.2 or DTLS is used with CBC encryption...

Man-in-the-Middle (MitM)

OpenSSL is vulnerable to man in the middle MitM attacks. These attacks are possible because the DTLS retransmission implementation doesn't correctly maintain data structures for digest and encryption contexts...

Denial Of Service (DoS) Through Buffer Overflow

OpenSSL is vulnerable to denial of service DoS attacks. These attacks can be triggered by sending invalid DTLS fragments which cause a buffer overrun. This overrun might allow attackers to run arbitrary code...

Denial Of Service (DoS) Through Recursion

OpenSSL is vulnerable to denial of service DoS attacks. These attacks can be made using an invalid DTLS handshake causing OpenSSL to go into a recursive loop...