4437 matches found
OpenSSL Security Advisory [17 March 2004]
OpenSSL Security Advisory 17 March 2004 Updated versions of OpenSSL are now available which correct two security issues: 1. Null-pointer assignment during SSL handshake =============================================== Testing performed by the OpenSSL group using the Codenomicon TLS Test Tool...
Security fix for the ALT Linux 9 package openssl10 version 0.9.6l-alt2
March 17, 2004 Dmitry V. Levin 0.9.6l-alt2 - Fixed null-pointer assignment during SSL handshake CAN-2004-0079...
Multiple OpenSSL Vulnerabilities
Background The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, full-featured, and Open Source toolkit implementing the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols as well as a full-strength general purpose cryptography library...
OpenSSL contains null-pointer assignment in do_change_cipher_spec() function
Overview OpenSSL contains a null-pointer assignment in the dochangecipherspec function which could allow a remote, unauthenticated attacker to cause OpenSSL to crash. Description OpenSSL implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols and includes a general...
Security fix for the ALT Linux 8 package openssl10 version 0.9.6l-alt2
March 17, 2004 Dmitry V. Levin 0.9.6l-alt2 - Fixed null-pointer assignment during SSL handshake CAN-2004-0079...
Vulnerability in OpenSSL CVE-2004-0079
The Codenomicon TLS Test Tool uncovered a null-pointer assignment in the dochangecipherspec function. A remote attacker could perform a carefully crafted SSL/TLS handshake against a server that used the OpenSSL library in such a way as to cause a crash...
[SECURITY] [DSA 173-1] New bugzilla packages fix privilege escalation
-------------------------------------------------------------------------- Debian Security Advisory DSA 173-1 [email protected] http://www.debian.org/security/ Martin Schulze October 9th, 2002 http://www.debian.org/security/faq -...
CVE-2001-0187
Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment...
CVE-2017-1059
CVE-2017-1059 is rejected/not used; this entry does not represent an active vulnerability.
CVE-2022-40154
CVE-2022-40154 is rejected; this CVE entry is not an active vulnerability.
CVE-2021-38577
CVE-2021-38577 is linked in several sources to a heap overflow in BaseBmpSupportLib within Tianocore Edk2. The available connected documents confirm a BaseBmpSupportLib heap overflow as the underlying issue, but there are no public details in these documents about affected versions, exploitabilit...
CVE-2021-41984
CVE-2021-41984 entry is rejected/not used and does not represent an active vulnerability.
CVE-2023-2918
CVE-2023-2918 is rejected/not used per the Initial Description.
CVE-2022-32713
CVE-2022-32713 is rejected/not used and does not represent an active vulnerability entry.
CVE-2023-2230
CVE-2023-2230 entry is rejected/not used per the Initial Description.
CVE-2024-1469
CVE-2024-1469 is a duplicate entry; the connected document confirms this and points to CVE-2024-0845 as the valid reference. CVE-2024-0845 concerns PDF Viewer for Elementor (WordPress) up to version 2.9.3, with an authenticated Stored Cross-Site Scripting vulnerability via the render function. Th...