CVE-2012-0050

OpenSSL versions affected: 0.9.8s and 1.0.0f. DTLS support flaw leads to remote denial of service via an out-of-bounds read, noted as stemming from an incorrect fix for CVE-2011-4108. Connected ALT Linux advisories show fixes for CVE-2012-0050 by upgrading OpenSSL to 1.0.0h (e.g., openssl1.0h-alt...

CVE-2012-0050

OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service crash via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108...

CVE-2012-0050

OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service crash via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108...

OpenSSL -- DTLS Denial of Service

The OpenSSL Team reports: A flaw in the fix to CVE-2011-4108 can be exploited in a denial of service attack. Only DTLS applications using OpenSSL 1.0.0f and 0.9.8s are affected...

Mandriva Linux Security Advisory : openssl (MDVSA-2012:006)

Multiple vulnerabilities has been found and corrected in openssl : The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack CVE-2011-410...

SuSE 11.1 Security Update : OpenSSL (SAT Patch Number 5635)

Various security vulnerabilities have been fixed in OpenSSL : - DTLS plaintext recovery attack. CVE-2011-4108 - double-free in Policy Checks. CVE-2011-4109 - uninitialized SSL 3.0 padding. CVE-2011-4576 - malformed RFC 3779 data can cause assertion failures. CVE-2011-4577 - SGC restart DoS attack...

SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 7923)

Various security vulnerabilities have been fixed in OpenSSL : - DTLS plaintext recovery attack. CVE-2011-4108 - double-free in Policy Checks. CVE-2011-4109 - uninitialized SSL 3.0 padding. CVE-2011-4576 - malformed RFC 3779 data can cause assertion failures. CVE-2011-4577 - SGC restart DoS attack...

openssl: fixing various security issues (important)

Various security vulnerabilities have been fixed in openssl: - DTLS plaintext recovery attack CVE-2011-4108 - uninitialized SSL 3.0 padding CVE-2011-4576 - malformed RFC 3779 data can cause assertion failures CVE-2011-4577 - SGC restart DoS attack CVE-2011-4619 - invalid GOST parameters DoS attac...

[SECURITY] [DSA 2390-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2390-1 [email protected] http://www.debian.org/security/ Florian Weimer January 15, 2012 http://www.debian.org/security/faq -...

DSA-2390-1 openssl - several

Bulletin has no description...

OpenSSL 1.0.0 < 1.0.0f Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.0.0f. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.0f advisory. - The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remot...

DEBIAN-CVE-2012-0390

The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext size, which makes it easier for remote attackers to recover partial plaintext via a timing side-channel attack, a related...

CVE-2012-0390

The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext size, which makes it easier for remote attackers to recover partial plaintext via a timing side-channel attack, a related...

CVE-2012-0390

The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext size, which makes it easier for remote attackers to recover partial plaintext via a timing side-channel attack, a related...

Sql injection

The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext size, which makes it easier for remote attackers to recover partial plaintext via a timing side-channel attack, a related...

CVE-2011-4108

The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack...

Design/Logic Flaw

The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack...

CVE-2011-4108

The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack...

CVE-2011-4108

The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack...

CVE-2011-4108

The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack...