Security Bulletin: Securing your products against OpenSSL and TLS vulnerabilities

Question Security Bulletin: Securing your products against OpenSSL and TLS vulnerabilities Answer IN THIS ARTICLE Abstract Vulnerability Details Affected products and versions Remediation apache 2.2 Nginx asperanoded asperahttpd Cygwin-SSH server Abstract OpenSSL vulnerabilities are disclosed by...

CVE-2016-2017

CVE-2016-2017 corresponds to a padding-oracle vulnerability in CBC mode decryption affecting OpenSSL. The IBM Aspera bulletin itemizes CVE-2016-2017 within its OpenSSL-related entries and states that OpenSSL versions before 1.0.1t and before 1.0.2h are vulnerable, enabling an attacker to decrypt ...