Denial of service

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.24.45, 8.0 before 8.04.44, 8.1 before 8.12.35, and 8.2 before 8.21.10, allows remote attackers to cause a denial of service page fault and device reload via a malformed DTLS message, aka Bug ID CSCtb64913...

CVE-2010-0565

Cisco ASA 5500 Series is affected by CVE-2010-0565 via a WebVPN DTLS Denial of Service vulnerability. A malformed DTLS message sent to the DTLS port (default UDP 443) can cause a page fault and device reload when WebVPN and DTLS are enabled. Affected software versions include 7.2.x before 7.2(4.4...

CVE-2010-0565: Undefined Security Weakness

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.24.45, 8.0 before 8.04.44, 8.1 before 8.12.35, and 8.2 before 8.21.10, allows remote attackers to cause a denial of service page fault and device reload via a malformed DTLS message, aka Bug ID CSCtb64913...

CentOS 5 : openssl (CESA-2007:0964)

Updated OpenSSL packages that correct several security issues are now available for Red Hat Enterprise 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenSSL is a toolkit that implements Secure Sockets Layer SSL v2/v3 and Transport Layer...

Mandriva Linux Security Advisory : openssl (MDVSA-2009:310)

Multiple security vulnerabilities has been identified and fixed in OpenSSL : The dtls1bufferrecord function in ssl/d1pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service memory consumption via a large series of future epoch DTLS records that are...

GLSA-200912-01 : OpenSSL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200912-01 OpenSSL: Multiple vulnerabilities Multiple vulnerabilities have been reported in OpenSSL: Marsh Ray of PhoneFactor and Martin Rex of SAP independently reported that the TLS protocol does not properly handle session...

OpenSSL: Multiple vulnerabilities

Background OpenSSL is an Open Source toolkit implementing the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 as well as a general purpose cryptography library. Description Multiple vulnerabilities have been reported in OpenSSL: Marsh Ray of PhoneFactor and Martin Rex of SAP...

Mandrake Security Advisory MDVSA-2009:239 (openssl)

The remote host is missing an update to openssl announced via advisory MDVSA-2009:239. OpenVAS Vulnerability Test $Id: mdksa2009239.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:239 openssl Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Mandrake Security Advisory MDVSA-2009:237 (openssl)

The remote host is missing an update to openssl announced via advisory MDVSA-2009:237. OpenVAS Vulnerability Test $Id: mdksa2009237.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:237 openssl Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

SuSE 11 Security Update : OpenSSL (SAT Patch Number 990)

OpenSSL DTLS remote DoS in ChangeCipherSpec CVE-2009-1386 and in out-of-sequence message handling CVE-2009-1387 have been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 6267)

Three remote DoS vulnerabilities have been fixed in OpenSSL: a DTLS epoch record buffer memory DoS CVE-2009-1377, a DTLS fragment handling memory DoS CVE-2009-1378 and a DTLS fragment read after a free DoS. CVE-2009-1379 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of...

Mandriva Linux Security Advisory : openssl (MDVSA-2009:238)

Multiple vulnerabilities was discovered and corrected in openssl : Use-after-free vulnerability in the dtls1retrievebufferedfragment function in ssl/d1both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service openssl sclient crash and possibly have unspecified other impa...

openssl security update

CentOS Errata and Security Advisory CESA-2009:1335 Updated openssl packages that fix several security issues, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team...

openssl security, bug fix, and enhancement update

0.9.8e-12 - abort if selftests failed and random number generator is polled - mention EVPaes and EVPsha2xx routines in the manpages - add README.FIPS 0.9.8e-10 - fix CVE-2009-1386 CVE-2009-1387 DTLS DoS problems 503685, 503688 0.9.8e-9 - fix CVE-2009-1377 CVE-2009-1378 CVE-2009-1379 DTLS DoS...

OpenSSL: DTLS epoch record buffer memory DoS

The dtls1bufferrecord function in ssl/d1pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service memory consumption via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer limitation bug."...

openssl: DTLS NULL deref crash on early ChangeCipherSpec request

ssl/s3pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a DTLS ChangeCipherSpec packet that occurs before ClientHello...

Moderate: Red Hat Security Advisory: openssl security, bug fix, and enhancement update

Updated openssl packages that fix several security issues, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenSSL is a toolkit that implements the Secure...

OpenSSL: DTLS pointer use-after-free flaw (DoS)

Use-after-free vulnerability in the dtls1retrievebufferedfragment function in ssl/d1both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service openssl sclient crash and possibly have unspecified other impact via a DTLS packet, as demonstrated by a packet from a server tha...

openSUSE Security Update : libopenssl-devel (libopenssl-devel-907)

Three remote DoS vulnerabilities have been fixed in OpenSSL: a DTLS epoch record buffer memory DoS CVE-2009-1377, a DTLS fragment handling memory DoS CVE-2009-1378 and a DTLS fragment read after a free DoS CVE-2009-1379. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

openSUSE Security Update : libopenssl-devel (libopenssl-devel-907)

Three remote DoS vulnerabilities have been fixed in OpenSSL: a DTLS epoch record buffer memory DoS CVE-2009-1377, a DTLS fragment handling memory DoS CVE-2009-1378 and a DTLS fragment read after a free DoS CVE-2009-1379. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...