PT-2016-3309

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.0.1t OpenSSL versions prior to 1.0.2h Description The issue is related to an integer overflow in the EVP EncryptUpdate function, which can cause a denial of service due to heap memory corruption. This can be exploit...

PT-2016-3308

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.0.1t and 1.0.2h MySQL Server versions 5.6.30 and earlier, 5.7.12 and earlier Description The issue is related to an integer overflow in the EVP EncodeUpdate function in OpenSSL, which can cause a denial of service o...

UBUNTU-CVE-2016-2105

Integer overflow in the EVPEncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service heap memory corruption via a large amount of binary data...

UBUNTU-CVE-2016-2106

Integer overflow in the EVPEncryptUpdate function in crypto/evp/evpenc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service heap memory corruption via a large amount of data...

PT-2016-3310

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.0.1t OpenSSL versions prior to 1.0.2h Description The issue is related to the asn1 d2i read bio function in the ASN.1 BIO implementation, which allows remote attackers to cause a denial of service due to memory...

OpenSSL 'EVP_DecodeUpdate' Denial of Service Vulnerability

OpenSSL is an open source implementation of SSL used to enable strong encryption of network communications and is now widely used in a variety of web applications. A denial of service vulnerability exists in OpenSSL. Due to an integer underflow within the EVPDecodeUpdate function located within...

PT-2015-1015 · Openssl +8 · Openssl +12

Name of the Vulnerable Software and Affected Versions: OpenSSL versions prior to 0.9.8za OpenSSL versions prior to 1.0.0m OpenSSL versions prior to 1.0.1h Description: The issue affects the confidentiality, integrity, and availability of protected information. It can be exploited remotely,...

openssl security update

0.9.8e-12.1 - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables 510197 - fix CVE-2009-4355 - do not leak memory when CRYPTOcleanupallexdata is called prematurely by application 546707...

Input validation

NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to...