PT-2026-97430

Name of the Vulnerable Software and Affected Versions BusyBox affected versions not specified Description The get client hello function in BusyBox TLS reads past the end of the input buffer when parsing a truncated ClientHello message. This occurs during the initial handshake process of the TLS...

PT-2014-1949

Name of the Vulnerable Software and Affected Versions OpenSSL versions 0.9.8zc through 1.0.1j Description The issue is related to the ssl23 get client hello function in s23 srvr.c of the OpenSSL library, which incorrectly handles outdated protocols. This can be exploited by a remote attacker to...

PT-2014-1702

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.0.1j Gentoo Linux affected versions not specified Description The issue allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a clien...