681 matches found
Fedora 20 : openssl-1.0.1e-40.fc20 (2014-13069) (POODLE)
Update fixing three moderate security issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Security Advisory 0007
Security Advisory 0007 PDF Date: October 20th 2014 Revision | Date | Changes ---|---|--- 1.0 | October 20th 2014 | Initial release SSLv3 is vulnerable to potential man in the middle attacks CVE-2014-3566 On October 14th, Arista became aware of a vulnerability in the Secure Sockets Layer version 3...
Apple iOS < 8.1 Multiple Vulnerabilities (POODLE)
Binary data appleios81check.nbin...
Amazon Linux AMI : nss (ALAS-2014-429) (POODLE)
A flaw was found in the way SSL 3.0 handled padding bytes when decrypting messages encrypted using block ciphers in cipher block chaining CBC mode. This flaw allows a man-in-the-middle MITM attacker to decrypt a selected byte of a cipher text in as few as 256 tries if they are able to force a...
Fedora 19 : openssl-1.0.1e-40.fc19 (2014-13012) (POODLE)
Update fixing three moderate security issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
SSLv3 Protocol vulnerability‘POODLE’to fix the related concepts-vulnerability warning-the black bar safety net
2 0 1 4 years 1 0 On 1 5 December, Google released a report about the SSLv3 “POODLE”of the high-risk vulnerability vulnerability number CVE-2 0 1 4-3 5 6 6 A brief analysis of the report. According to Google's statement, the vulnerability across all of the SSLv3 version, the use of the...
TA14-290A: SSL 3.0 Protocol Vulnerability and POODLE Attack
NCCIC / US-CERT National Cyber Awareness System: TA14-290A: SSL 3.0 Protocol Vulnerability and POODLE Attack 10/17/2014 12:27 PM EDT Original release date: October 17, 2014 Systems Affected All systems and applications utilizing the Secure Socket Layer SSL 3.0 with cipher-block chaining CBC mode...
Encryption security vulnerability“poodle”letting the hackers have the opportunity-vulnerability warning-the black bar safety net
Google three researchers found a new Internet vulnerability-the“poodle,”the vulnerability could access through the network found that the encryption of the data, allowing hackers access to the user's Bank accounts, email and other services. ! Following the“heartbleed”and“Shellshock”vulnerabilitie...
Privacy Tools — Tor Browser 4.0 and Tails 1.2 Update Released
Tor - Privacy oriented encrypted anonymizing service, has announced the launch of its next version of Tor Browser Bundle, Tor version 4.0, which disables SSL3 to prevent POODLE attack and uses new transports that are intended to defeat the Great Firewall of China and other extremely restrictive...
HTTP SSL/TLS Version Detection (POODLE scanner)
Check if an HTTP server supports a given version of SSL/TLS. If a web server can successfully establish an SSLv3 session, it is likely to be vulnerable to the POODLE attack described on October 14, 2014, as a patch against the attack is unlikely...
CentOS 5 : openssl (CESA-2014:1653) (POODLE)
Updated openssl packages that contain a backported patch to mitigate the CVE-2014-3566 issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL,...
Scientific Linux Security Update : openssl on SL5.x i386/x86_64 (20141016) (POODLE)
This update adds support for the TLS Fallback Signaling Cipher Suite Value TLSFALLBACKSCSV, which can be used to prevent protocol downgrade attacks against applications which re-connect using a lower SSL/TLS protocol version when the initial connection indicating the highest supported protocol...
Scientific Linux Security Update : openssl on SL6.x, SL7.x i386/x86_64 (20141016) (POODLE)
This update adds support for the TLS Fallback Signaling Cipher Suite Value TLSFALLBACKSCSV, which can be used to prevent protocol downgrade attacks against applications which re-connect using a lower SSL/TLS protocol version when the initial connection indicating the highest supported protocol...
RHEL 6 / 7 : openssl (RHSA-2014:1652) (POODLE)
Updated openssl packages that contain a backported patch to mitigate the CVE-2014-3566 issue and fix two security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System...
Mac OS X < 10.10 Multiple Vulnerabilities (POODLE) (Shellshock)
The remote host is running a version of Mac OS X is prior to version 10.10. This update contains several security-related fixes for the following components : - 802.1X - AFP File Server - apache - App Sandbox - Bash - Bluetooth - Certificate Trust Policy - CFPreferences - CoreStorage - CUPS - Doc...
Debian DSA-3053-1 : openssl - security update (POODLE)
Several vulnerabilities have been found in OpenSSL, the Secure Sockets Layer library and toolkit. - CVE-2014-3513 A memory leak flaw was found in the way OpenSSL parsed the DTLS Secure Real-time Transport Protocol SRTP extension data. A remote attacker could send multiple specially crafted...
Oracle Linux 5 : openssl (ELSA-2014-1653) (POODLE)
From Red Hat Security Advisory 2014:1653 : Updated openssl packages that contain a backported patch to mitigate the CVE-2014-3566 issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. OpenSSL is a toolkit that...
RHEL 5 : openssl (RHSA-2014:1653) (POODLE)
Updated openssl packages that contain a backported patch to mitigate the CVE-2014-3566 issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL,...
CentOS Update for openssl CESA-2014:1653 centos5
Check the version of openssl SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882063";...
[slackware-security] openssl (SSA:2014-288-01)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security openssl SSA:2014-288-01 New openssl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+...