506 matches found
SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2015:0541-1)
OpenSSL was updated to fix various security issues. Following security issues were fixed : - CVE-2015-0209: A Use After Free following d2iECPrivatekey error was fixed which could lead to crashes for attacker supplied Elliptic Curve keys. This could be exploited over SSL connections with client...
SuSE 11.3 Security Update : OpenSSL (SAT Patch Number 10470)
OpenSSL has been updated to fix various security issues : - A segmentation fault in ASN1TYPEcmp was fixed that could be exploited by attackers when e.g. client authentication is used. This could be exploited over SSL connections. CVE-2015-0286 - A ASN.1 structure reuse memory corruption was fixed...
Vulnerability in OpenSSL - PKCS7 NULL pointer dereferences
PKCS7 NULL pointer dereference. The PKCS7 parsing code does not handle missing outer ContentInfo correctly. An attacker can craft malformed ASN.1-encoded PKCS7 blobs with missing content and trigger a NULL pointer dereference on parsing. Applications that verify PKCS7 signatures, decrypt PKCS7 da...
PT-2015-1691
Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 0.9.8zg OpenSSL versions prior to 1.0.0s OpenSSL versions prior to 1.0.1n OpenSSL versions prior to 1.0.2b Description The issue is related to the PKCS7 dataDecode function in OpenSSL, which allows remote attackers to...
OWASP ESAPI Security Advisory: MAC Bypass in ESAPI Symmetric Encryption
OWASP ESAPI for Java Security Advisory 1 The OWASP Foundation MAC Bypass in ESAPI Symmetric Encryption Summary ======= Category: Symmetric cryptography Module: ESAPI Encryptor interface Announced: 2013-08-23 via ESAPI-Dev mailing list...
