CVE-2016-6709

An information disclosure vulnerability in Conscrypt and BoringSSL in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable a man-in-the-middle attacker to gain access to sensitive information if a non-standard cipher suite is used by an application. This issue is rated as High...

CVE-2016-6709

An information disclosure vulnerability in Conscrypt and BoringSSL in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable a man-in-the-middle attacker to gain access to sensitive information if a non-standard cipher suite is used by an application. This issue is rated as High...

CVE-2016-6709

CVE-2016-6709 describes an information disclosure vulnerability in Conscrypt and BoringSSL used by Android. The issue affects Android 6.x and 7.0 prior to 2016-11-01, where a MITM attacker could access sensitive data if a non-standard cipher suite is used by an application. The root cause is an i...

PT-2016-7069

Name of the Vulnerable Software and Affected Versions Android versions 6.x through 7.0 before 2016-11-01 Description An information disclosure issue could allow a man-in-the-middle attacker to gain access to sensitive information if a non-standard cipher suite is used by an application. This issu...

CVE-2016-6709: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in Conscrypt and BoringSSL in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable a man-in-the-middle attacker to gain access to sensitive information if a non-standard cipher suite is used by an application. This issue is rated as High...

openSUSE Security Update : libircclient (openSUSE-2016-846)

This update fixes an issue with libircclient using an insecure openssl cipher suite. - cipher suite fix from ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH to EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH bnc857151 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...

RedHat Update for openssl RHSA-2016:0722-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenSSL CVE-2 0 1 6-0 8 0 0 and CVE-2 0 1 6-0 7 0 3 bug fixes the details of pick-up fun-vulnerability warning-the black bar safety net

Details 3 6 0 including a portion of the information security practice of course, the“3 6 0 Information Security Department”progressively adhering to best security practices in the https and other ssl fields gradually made significant changes. Such as important system to prohibit unsafe cipher...

OpenSSL CVE-2 0 1 6-0 8 0 0 and CVE-2 0 1 6-0 7 0 3 bug fixes the details of pick-up fun-vulnerability warning-the black bar safety net

1. Primer Have been recently and 3 6 0 Nirvan Team DQ430 happy to participate in a encryption vendors of the annual General meeting, the results of openssl is also out of touch lively, maybe really in order to DH brother sent the gift, bitter us these security operations. Thanks to Shawn for...

DLA-421-1 openssl - security update

Bulletin has no description...

openSUSE Security Update : LibVNCServer (openSUSE-2015-851)

The LibVNCServer package was updated to fix the following security issues : - bsc897031: fix several security issues : - CVE-2014-6051: Integer overflow in MallocFrameBuffer on client side. - CVE-2014-6052: Lack of malloc return value checking on client side. - CVE-2014-6053: Server crash on a ve...

SUSE SLED12 / SLES12 Security Update : LibVNCServer (SUSE-SU-2015:2088-1)

The LibVNCServer package was updated to fix the following security issues : - bsc897031: fix several security issues : - CVE-2014-6051: Integer overflow in MallocFrameBuffer on client side. - CVE-2014-6052: Lack of malloc return value checking on client side. - CVE-2014-6053: Server crash on a ve...

UBUNTU-CVE-2015-3230

389 Directory Server formerly Fedora Directory Server before 1.3.3.12 does not enforce the nsSSL3Ciphers preference when creating an sslSocket, which allows remote attackers to have unspecified impact by requesting to use a disabled cipher...

Microsoft Cryptographic Cipher Suite Prioritization Advisory (3042058)

This host is missing an important security update according to Microsoft advisory 3042058. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Oracle: Security Advisory (ELSA-2012-1151)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OracleVM 3.3 : nss (OVMSA-2015-0073)

The remote OracleVM system is missing necessary patches to address critical security updates : nss - Added nss-vendor.patch to change vendor - Additional NULL initialization. - Updated the patch to keep old cipher suite order - Resolves: Bug 1224449 - Rebase to nss-3.19.1 - Resolves: Bug 1224449 ...

Oracle Linux 6 / 7 : nss (ELSA-2015-1185)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1185 advisory. nss 3.19.1-3.0.1 - Added nss-vendor.patch to change vendor 3.19.1-3 - Additional NULL initialization. 3.19.1-2 - Updated the patch to keep old cipher suite...

MS KB3042058: Update to Default Cipher Suite Priority Order

The remote Windows host is missing an update to the cryptographic cipher suite prioritization. The update adds additional cipher suites and improves cipher suite priority ordering. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid83359; scriptversion"1.3";...

Microsoft security advisory: Update to default cipher suite priority order: May 12, 2015

None None...

SOL16126 - OpenSSL vulnerability CVE-2014-3572

Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not list any version...