Vulnerabilities of the Alt Linux SPT operating system, which allow a malicious entity to compromise the integrity and accessibility of transmitted protected information

The numerous vulnerabilities of the OpenSSL cryptographic library for the Alt Linux SPT operating system can lead to the compromise of the integrity and accessibility of transmitted protected information. Exploitation of these vulnerabilities can be carried out remotely...

OpenSSL: Invalid free in DTLS

An invalid-free flaw was found in the way OpenSSL handled certain DTLS handshake messages. A malicious DTLS client or server could send a specially crafted message to the peer, which could cause the application to crash or potentially result in arbitrary code execution...

The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality of protected information.

The vulnerability of the openssl package up to version 0.9.7k in the Gentoo Linux operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited remotely...

DEBIAN-CVE-2014-0160

The 1 TLS and 2 DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys,...

openssl: missing bn_wexpand return value checks

OpenSSL before 0.9.8m does not check for a NULL return value from bnwexpand function calls in 1 crypto/bn/bndiv.c, 2 crypto/bn/bngf2m.c, 3 crypto/ec/ec2smpl.c, and 4 engines/eubsec.c, which has unspecified impact and context-dependent attack vectors...