Critical: openssl

Issue Overview: During certificate verfification, OpenSSL starting from version 1.0.1n and 1.0.2b will attempt to find an alternative certificate chain if the first attempt to build such a chain fails. An error in the implementation of this logic can mean that an attacker could cause certain chec...

OpenSSL TLS Heartbeat information disclosure - Ver2 (CVE-2014-0160)

An information disclosure vulnerability has been reported inOpenSSL. The vulnerability is due to an error when handling TLS/DTLS heartbeat packets. Successful exploitation of this vulnerability could allow a remote attacker to disclose memory contents of a connected client or server...

Beware Of Fake 'HeartBleed Bug Remover Tool', Hijacks System with Malware

I am considering that you all must have read my last article on OpenSSL Heartbleed, a critical bug in the OpenSSL's implementation of the TLS/DTLS heartbeat extension that allows attackers to read portions of the affected server’s memory, potentially revealing users data, that the server did not...

McAfee Firewall Enterprise OpenSSL Information Disclosure (SB10071) (Heartbleed)

The remote host has a version of McAfee Firewall Enterprise installed that is affected by an out-of-bounds read error, known as Heartbleed, in the TLS/DTLS implementation due to improper handling of TLS heartbeat extension packets. A remote attacker, using crafted packets, can trigger a buffer...

RUCKUS ADVISORY ID 041414: OpenSSL 1.0.1 library's "Heart bleed" vulnerability - CVE-2014-0160

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 RUCKUS ADVISORY ID 041414 Customer release date: April 14, 2014 Public release date: April 14, 2014 TITLE OpenSSL 1.0.1 library's "Heart bleed" vulnerability - CVE-2014-0160 SUMMARY OpenSSL library is used in Ruckus products to implement various...

F-Secure E-mail/Server Security OpenSSL TLS/DTLS心跳信息泄漏漏洞

CVE ID:CVE-2014-0160 F-Secure E-mail/Server Security/F-Secure Server Security产品存在安全漏洞。 F-Secure E-mail/Server Security/F-Secure Server Security所绑定的OpenSSL存在安全漏洞，OpenSSL处理TLS”心跳“扩展存在一个边界错误，允许攻击者利用漏洞获取64k大小的已链接客户端或服务器的内存内容。内存信息可包括私钥，用户名密码等。 0 F-Secure E-mail and Server Security 10.x F-Secure E-mail...

Splunk 6.x < 6.0.3 Multiple OpenSSL Vulnerabilities (Heartbleed)

According to its version number, the Splunk Web hosted on the remote web server is 6.x prior to 6.0.3. It is, therefore, affected by multiple OpenSSL-related vulnerabilities : - A flaw exists with the OpenSSL version being used by Splunk with the 'ssl3takemac' in 'ssl/s3both.c'. This allows a...

HeartBleed Bug Explained - 10 Most Frequently Asked Questions

Heartbleed – I think now it’s not a new name for you, as every informational website, Media and Security researchers are talking about probably the biggest Internet vulnerability in recent history. It is a critical bug in the OpenSSL's implementation of the TLS/DTLS heartbeat extension that allow...

[SECURITY] [DSA 2896-2] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2896-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 08, 2014 http://www.debian.org/security/faq -...

Debian DSA-2896-1 : openssl - security update

A vulnerability has been discovered in OpenSSL's support for the TLS/DTLS Heartbeat extension. Up to 64KB of memory from either client or server can be recovered by an attacker. This vulnerability might allow an attacker to compromise the private key and other sensitive data in memory. All users...

Debian Security Advisory DSA 2896-1 (openssl - security update)

A vulnerability has been discovered in OpenSSL OpenVAS Vulnerability Test $Id: deb2896.nasl 9136 2018-03-19 13:08:02Z cfischer $ Auto-generated from advisory DSA 2896-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2015 Greenbone Networks GmbH...

DSA-2896-1 openssl - security update

Bulletin has no description...

Debian: Security Advisory (DSA-2896-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SSL Certificate Information

This plugin connects to every SSL-related port and attempts to extract and dump the X.509 certificate. TRUSTED...