Debian Security Advisory DSA 3773-1 (openssl - security update)

Several vulnerabilities were discovered in OpenSSL: CVE-2016-7056 A local timing attack was discovered against ECDSA P-256. CVE-2016-8610 It was discovered that no limit was imposed on alert packets during an SSL handshake. CVE-2017-3731 Robert Swiecki discovered that the RC4-MD5 cipher when...

PHP study notes and security vulnerabilities-vulnerability warning-the black bar safety net

System variables $POST // get the post data is a dictionary $GET // get get data, is a dictionary The error control operator PHP supports one error control operator:@the. When it is placed in a PHP expression, the expression may produce any error information is ignored. Variable default value Whe...

Threat Outbreak Alert RuleID27429: Email Messages Distributing Malicious Software on January 26, 2017

Medium Alert ID: 52429 First Published: 2017 January 26 15:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27429 may contain the following files: Name |...

CVE-2017-3731

If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; user...

PT-2017-3944

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.0.2 through 1.0.2k OpenSSL versions 1.1.0 through 1.1.0d MySQL Server versions 5.6.35 and earlier MySQL Server versions 5.7.18 and earlier Description The issue is related to an out-of-bounds read in the OpenSSL library when...

Vulnerability in OpenSSL - Truncated packet could crash via OOB read

If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; user...

UBUNTU-CVE-2017-3731

If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; user...

Threat Outbreak Alert RuleID27354: Email Messages Distributing Malicious Software on January 25, 2017

Medium Alert ID: 52422 First Published: 2017 January 25 19:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27354 may contain the following files: Name |...

Threat Outbreak Alert RuleID27296: Email Messages Distributing Malicious Software on January 25, 2017

Medium Alert ID: 52420 First Published: 2017 January 25 19:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27296 may contain the following files: Name |...

Threat Outbreak Alert RuleID27420: Email Messages Distributing Malicious Software on January 25, 2017

Medium Alert ID: 52418 First Published: 2017 January 25 17:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27420 may contain the following files: Name |...

Threat Outbreak Alert RuleID27414: Email Messages Distributing Malicious Software on January 25, 2017

Medium Alert ID: 52415 First Published: 2017 January 25 17:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27414 may contain the following files: Name |...

Threat Outbreak Alert RuleID27413: Email Messages Distributing Malicious Software on January 25, 2017

Medium Alert ID: 52414 First Published: 2017 January 25 17:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27413 may contain the following files: Name |...

Threat Outbreak Alert RuleID27382: Email Messages Distributing Malicious Software on January 24, 2017

Medium Alert ID: 52401 First Published: 2017 January 24 20:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27382 may contain the following files: Name |...

Threat Outbreak Alert RuleID27400: Email Messages Distributing Malicious Software on January 24, 2017

Medium Alert ID: 52408 First Published: 2017 January 24 18:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27400 may contain the following files: Name |...

Threat Outbreak Alert RuleID27351: Email Messages Distributing Malicious Software on January 23, 2017

Medium Alert ID: 52393 First Published: 2017 January 23 16:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27351 may contain the following files: Name |...

Threat Outbreak Alert RuleID27365: Email Messages Distributing Malicious Software on January 23, 2017

Medium Alert ID: 52391 First Published: 2017 January 23 15:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27365 may contain the following files: Name |...

Threat Outbreak Alert RuleID27361: Email Messages Distributing Malicious Software on January 23, 2017

Medium Alert ID: 52388 First Published: 2017 January 23 15:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27361 may contain the following files: Name |...

Threat Outbreak Alert RuleID27345: Email Messages Distributing Malicious Software on January 23, 2017

Medium Alert ID: 52383 First Published: 2017 January 23 14:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27345 may contain the following files: Name |...

Threat Outbreak Alert RuleID27257: Email Messages Distributing Malicious Software on January 23, 2017

Medium Alert ID: 52376 First Published: 2017 January 23 14:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27257 may contain the following files: Name |...

Threat Outbreak Alert RuleID27299: Email Messages Distributing Malicious Software on January 20, 2017

Medium Alert ID: 52371 First Published: 2017 January 20 19:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27299 may contain the following files: Name |...