24566 matches found
OESA-2024-2386 openssl security update
OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: Use of the low-level GF2^m elliptic curve APIs with untrusted explicit values for the field polynomial can lead to...
OESA-2024-2385 openssl security update
OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: Use of the low-level GF2^m elliptic curve APIs with untrusted explicit values for the field polynomial can lead to...
SUSE CVE-2024-28885
Observable discrepancy in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...
SUSE CVE-2024-33617
Insufficient control flow management in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...
Intel QAT Engine for OpenSSL software Control Flow Management Insufficiency Vulnerability
The Intel QAT Engine for OpenSSL software is an open source software plug-in designed to accelerate OpenSSL cryptographic operations with Intel Quick Assist Technology QAT hardware. A control flow management deficiency vulnerability exists in Intel QAT Engine for OpenSSL software, which can be...
Intel QAT Engine for OpenSSL software information disclosure vulnerability
The Intel QAT Engine for OpenSSL software is an open source software plug-in designed to accelerate OpenSSL cryptographic operations with Intel Quick Assist Technology QAT hardware. An information disclosure vulnerability exists in Intel QAT Engine for OpenSSL software, which can be exploited by...
Security Bulletin: Vulnerability in OpenSSL affects IBM Integrated Analytics System [CVE-2023-5678]
Summary Redhat provided OpenSSL is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE CVE-2023-5678 Vulnerability Details CVEID:CVE-2023-5678 DESCRIPTION: Openssl is vulnerable to a denial of service, caused by a flaw when using DHgeneratekey...
Fedora 41 : openssl (2024-7d5c1bcc78)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-7d5c1bcc78 advisory. Fix CVE-2024-5535: SSLselectnextproto buffer overread Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...
Fedora 37 : openssl (2022-0f1d2e0537)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-0f1d2e0537 advisory. Security fix for CVE-2022-3602 and CVE-2022-3786 Tenable has extracted the preceding description block directly from the Fedora security advisory...
openssl and openssl-fips-provider security update
openssl 1:3.2.2-6.0.1 - Enable openssl-fips-provider dependency Orabug: 36504822 - Temporary disable openssl-fips-provider dependency Orabug: 36504822 - Replace upstream references Orabug: 34340177 1:3.2.2-6 - rebuilt Related: RHEL-55339 1:3.2.2-5 - Fix CVE-2024-6119: Possible denial of service i...
HPESBUX04744 rev.1 - HP-UX Using OpenSSL, Multiple Local and Remote Vulnerabilities
Potential Security Impact: Local: Denial of Service DoS, Unauthorized Access to Files, Buffer Overflow; Remote: Denial of Service DoS, Unauthorized Access to Files, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX OpenSSL Software - Prior to A.03.00.15.001 CVS...
edk2 security update
20240524-6.0.1 - Replace upstream references Orabug:36569119 20240524-6 - edk2-OvmfPkg-CpuHotplugSmm-delay-SMM-exit.patch RHEL-56974 - edk2-Bumped-openssl-submodule-version-to-0205b5898872.patch RHEL-55336 - Resolves: RHEL-56974 qemu-kvm: warning: Blocked re-entrant IO on MemoryRegion:...
Fedora 37 : openssl (2022-1c20b4dde2)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-1c20b4dde2 advisory. Automatic update for openssl-3.0.5-1.fc37. Changelog Tue Jul 5 2022 Clemens Lang - 1:3.0.5-1 - Rebase to upstream version 3.0.5 Related: rhbz2099972...
CVE-2024-33617
Insufficient control flow management in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...
CVE-2024-31074
Observable timing discrepancy in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...
CVE-2024-28885
Observable discrepancy in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...
CVE-2024-31074
Observable timing discrepancy in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...
CVE-2024-31074
The CVE affects Intel QAT Engine for OpenSSL. Observable timing discrepancy may disclose information via network access in some Intel QAT Engine for OpenSSL before v1.6.1. Connected advisories indicate fixes are included in QAT Engine 1.7.0, with 1.6.1 release of that line addressing this issue. ...
