PT-2015-2972 · Oracle +5 · Mysql Server +4

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.5.45 and earlier MySQL Server versions 5.6.26 and earlier wolfSSL versions prior to 3.6.8 Description: The issue is related to errors in the code of the MySQL Server component, specifically in the encryption system. It...

Flawed TLS Implementations Leak RSA Keys

A number of TLS software implementations contain vulnerabilities that allow hackers with minimal computational expense to learn RSA keys. Florian Weimer, a researcher with Red Hat, last week published a paper called “Factoring RSA Keys With TLS Perfect Forward Secrecy” that demonstrated...