Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : OpenSSL vulnerabilities (USN-6937-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6937-1 advisory. It was discovered that OpenSSL incorrectly handled TLSv1.3 sessions when certain non-default TLS server configurations were in us...

PT-2024-38014 · Cato Networks · Cato Networks Windows Sdp Client

Name of the Vulnerable Software and Affected Versions: Cato Networks Windows SDP Client versions prior to 5.10.34 Description: The issue is related to a local privilege escalation vulnerability in the Cato Networks Windows SDP Client via the openssl configuration file. Recommendations: For versio...

openSUSE Security Advisory (SUSE-SU-2024:2635-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: libopenssl-3-devel / libopenssl-3-devel-32bit / etc (SUSE-SU-2024:2635-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2635-1 advisory. Security fixes: - CVE-2024-5535: Fixed SSLselectnextproto buffer overread bsc1227138 Other fixes: - Build...

Security Bulletin: IBM InfoSphere Information Server is affected by a denial of service vulnerability in JSON-java (CVE-2023-5072)

Summary A denial of service vulnerability in JSON-java used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2023-5072 DESCRIPTION: JSON-java is vulnerable to a denial of service, caused by a bug in the parser. By sending a specially crafted request, a remote...

Security Bulletin: AIX is vulnerable to arbitrary code execution (CVE-2024-4741) and denial of service (CVE-2024-5535, CVE-2024-4603) due to OpenSSL

Summary Vulnerabilities in OpenSSL could allow a remote attacker to execute arbitrary code CVE-2024-4741 or cause a denial of service CVE-2024-5535, CVE-2024-4603. OpenSSL is used by AIX as part of AIX's secure network communications. Vulnerability Details CVEID:CVE-2024-4741 DESCRIPTION: OpenSSL...

AIX is vulnerable to arbitrary code execution (CVE-2024-4741) and denial of service (CVE-2024-5535 CVE-2024-4603) due to OpenSSL

IBM SECURITY ADVISORY First Issued: Tue Jul 30 15:25:31 CDT 2024 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/openssladvisory42.asc Security Bulletin: AIX is vulnerable to arbitrary code execution CVE-2024-4741 and denial of service...

SUSE-SU-2024:2635-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: Security fixes: - CVE-2024-5535: Fixed SSLselectnextproto buffer overread bsc1227138 Other fixes: - Build with no-afalgeng bsc1226463 - Build with enabled sm2 and sm4 support bsc1222899 - Fix non-reproducibility issue bsc1223336...

CBL Mariner 2.0 Security Update: cloud-hypervisor-cvm / openssl (CVE-2024-5535)

The version of cloud-hypervisor-cvm / openssl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-5535 advisory. - Issue summary: Calling the OpenSSL API function SSLselectnextproto with an empty...

OESA-2024-1914 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: Calling the OpenSSL API function SSLselectnextproto with an empty supported client protocols buffer may cause a crash or memory contents to be sent ...

CVE-2024-5535 affecting package openssl for versions less than 1.1.1k-33

CVE-2024-5535 affecting package openssl for versions less than 1.1.1k-33. A patched version of the package is available...

CVE-2024-5535

...

Photon OS 3.0: Openssl PHSA-2022-3.0-0408

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0408. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Rocky Linux 9 : skopeo (RLSA-2024:4502)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:4502 advisory. golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 Tenable has extracted the preceding description block directly fro...

Photon OS 3.0: Nxtgn PHSA-2022-3.0-0408

An update of the nxtgn package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0408. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

USN-6854-1: OpenSSL vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description It was discovered that OpenSSL failed to choose an appropriately short private key size when computing shared-secrets in the Diffie-Hellman Key Agreement Protocol. A remote attacker could possibly use thi...

The vulnerability of the perl-Crypt-OpenSSL-RSA package on Red Hat Enterprise Linux operating systems allows a attacker to execute the Bleichenbacher attack.

The vulnerability of the perl-Crypt-OpenSSL-RSA package in Red Hat Enterprise Linux operating systems is related to the disclosure of information due to incompatibility. Exploiting this vulnerability could allow a remote attacker to execute a Bleichenbacher attack...

Photon OS 3.0: Openssl PHSA-2023-3.0-0538

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0538. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Openssl PHSA-2023-3.0-0595

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0595. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Openssl PHSA-2023-5.0-0055

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0055. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...