Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
suseSuseSUSE-SA:2010:020
HistoryApr 06, 2010 - 4:55 p.m.

remote denial of service, man in the middle in openssl

2010-04-0616:55:06
lists.opensuse.org
28
openssl
update
rfc5746
tls renegotiation
cve-2009-3555
unix
remote denial of service
man in the middle

EPSS

0.012

Percentile

85.6%

JSON

The openSSL library was updated to add support for the new RFC5746 TLS renegotiation feature to address vulnerabilities tracked as CVE-2009-3555, backported from openssl 0.9.8m.

Solution

There is no known workaround, please install the update packages.

OSVersionArchitecturePackageVersionFilename
SUSE Linux Enterprise Software Development Kit11ia64libopenssl-devel< 0.9.8h-30.22.21.1libopenssl-devel-0.9.8h-30.22.21.1.ia64.rpm
SUSE Linux Enterprise Server10.2i586openssl< 0.9.8a-18.39.6openssl-0.9.8a-18.39.6.i586.rpm
SUSE Linux Enterprise Server11s390xlibopenssl0_9_8< 0.9.8h-30.22.21.1libopenssl0_9_8-0.9.8h-30.22.21.1.s390x.rpm
SUSE Linux Enterprise Server10.2x86_64openssl-32bit< 0.9.8a-18.39.6openssl-32bit-0.9.8a-18.39.6.x86_64.rpm
openSUSE11.2x86_64libopenssl-devel< 0.9.8k-3.7.1libopenssl-devel-0.9.8k-3.7.1.x86_64.rpm
SUSE Linux Enterprise Server11s390xopenssl-debuginfo< 0.9.8h-30.22.21.1openssl-debuginfo-0.9.8h-30.22.21.1.s390x.rpm
SUSE Linux Enterprise Server11s390xopenssl-debugsource< 0.9.8h-30.22.21.1openssl-debugsource-0.9.8h-30.22.21.1.s390x.rpm
SUSE Linux Enterprise Server10.2i586openssl-doc< 0.9.8a-18.39.6openssl-doc-0.9.8a-18.39.6.i586.rpm
SUSE Linux Enterprise Server11x86_64openssl-doc< 0.9.8h-30.22.21.1openssl-doc-0.9.8h-30.22.21.1.x86_64.rpm
SUSE Linux Enterprise Server10.3i586openssl-debuginfo< 0.9.8a-18.42.2openssl-debuginfo-0.9.8a-18.42.2.i586.rpm
Rows per page:
1-10 of 1241

Related

nessus 61
redhat 4
openvas 67
centos 4
oraclelinux 3
osv 2
securityvulns 6
nvd 2
cvelist 2
ubuntucve 1
openssl 1
zdt 1
debiancve 2
f5 2
veracode 2
prion 2
cve 2
debian 4
ubuntu 4
exploitdb 2
altlinux 2
suse 1
seebug 3
mozilla 1
hackerone 2
fedora 8
cisco 2
slackware 1
fortinet 1
exploitpack 1
freebsd_advisory 1
cert 1
checkpoint_advisories 1
nessus
nessus
openSUSE Security Update : libopenssl-devel (libopenssl-devel-2232)
2010-04-09 00:00:00
SuSE 11 Security Update : OpenSSL (SAT Patch Number 2214)
2010-12-02 00:00:00
SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 6944)
2010-10-11 00:00:00
redhat
redhat
(RHSA-2010:0162) Important: openssl security update
2010-03-25 00:00:00
(RHSA-2010:0173) Important: openssl096b security update
2010-03-25 00:00:00
(RHSA-2010:0155) Moderate: java-1.4.2-ibm security and bug fix update
2010-03-17 00:00:00
openvas
openvas
CentOS Update for openssl CESA-2010:0162 centos5 i386
2011-08-09 00:00:00
Oracle: Security Advisory (ELSA-2010-0162)
2015-10-06 00:00:00
RedHat Update for openssl RHSA-2010:0162-01
2010-03-31 00:00:00
centos
centos
openssl security update
2010-03-27 17:30:13
openssl096b security update
2010-03-25 22:40:26
nspr, nss security update
2010-03-28 15:36:50
oraclelinux
oraclelinux
openssl security update
2010-03-25 00:00:00
openssl096b security update
2010-03-25 00:00:00
openssl097a security update
2010-03-25 00:00:00
osv
osv
Red Hat Security Advisory: openssl security update
2024-09-15 18:19:46
Apache Tomcat affected by vulnerability in TLS and SSL protocol
2022-05-02 03:46:22
securityvulns
securityvulns
[ MDVSA-2010:076-1 ] openssl
2010-04-22 00:00:00
Cisco Security Advisory: Transport Layer Security Renegotiation Vulnerability
2009-11-11 00:00:00
SSL data injection
2010-02-10 00:00:00
nvd
nvd
CVE-2009-3245
2010-03-05 19:30:00
CVE-2009-3555
2009-11-09 17:30:00
cvelist
cvelist
CVE-2009-3245
2010-03-05 19:00:00
CVE-2009-3555
2009-11-09 17:00:00
ubuntucve
ubuntucve
CVE-2009-3245
2010-03-05 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2009-3245
2010-02-23 00:00:00
zdt
zdt
OpenSSL < 0.9.8l and previous versions Multiple Vulnerability
2010-03-09 00:00:00
debiancve
debiancve
CVE-2009-3245
2010-03-05 19:30:00
CVE-2009-3555
2009-11-09 17:30:00
f5
f5
SOL15404 - OpenSSL vulnerability CVE-2009-3245
2014-07-14 00:00:00
K15404 : OpenSSL vulnerability CVE-2009-3245
2014-07-14 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:45:17
Man-in-the-Middle (MitM)
2020-04-10 00:36:56
prion
prion
Design/Logic Flaw
2010-03-05 19:30:00
Cross site request forgery (csrf)
2009-11-09 17:30:00
cve
cve
CVE-2009-3245
2010-03-05 19:30:00
CVE-2009-3555
2009-11-09 17:30:00
debian
debian
[SECURITY] [DSA-2141-4] New lighttpd packages fix regression
2011-01-12 18:51:18
[SECURITY] [DSA-2141-2] New nss packages fix protocol design flaw
2011-01-05 23:20:31
[SECURITY] [DSA-2141-2] New nss packages fix protocol design flaw
2011-01-05 23:20:31
ubuntu
ubuntu
Apache vulnerability
2010-09-21 00:00:00
NSS vulnerability
2010-04-09 00:00:00
nss vulnerability
2010-06-29 00:00:00
exploitdb
exploitdb
Mozilla NSS - NULL Character CA SSL Certificate Validation Security Bypass
2009-11-10 00:00:00
TLS - Renegotiation
2009-12-21 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 0.9.8l-alt1
2009-11-07 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8l-alt1
2009-11-07 00:00:00
suse
suse
man-in-the-middle attack in openssl
2009-11-18 09:50:39
seebug
seebug
ProFTPD TLS会话重协商明文数据注入漏洞
2009-12-15 00:00:00
TLS Renegotiation Vulnerability PoC Exploit
2009-12-21 00:00:00
Cisco Security Advisory: Transport Layer Security Renegotiation Vulnerability
2009-11-10 00:00:00
mozilla
mozilla
Update NSS to support TLS renegotiation indication — Mozilla
2010-03-30 00:00:00
hackerone
hackerone
LocalTapiola: Secure Client-Initiated Renegotiation
2017-12-27 15:57:52
Slack: TLS1/SSLv3 Renegotiation Vulnerability
2014-04-02 13:01:00
fedora
fedora
[SECURITY] Fedora 12 Update: gnutls-2.8.6-2.fc12
2010-06-25 18:15:19
[SECURITY] Fedora 12 Update: nss-3.12.6-1.2.fc12
2010-03-12 04:18:37
[SECURITY] Fedora 12 Update: openssl-1.0.0-4.fc12
2010-05-25 18:42:18
cisco
cisco
Transport Layer Security Renegotiation Vulnerability
2009-11-09 13:00:00
Transport Layer Security Renegotiation Remote Man-in-the-Middle Attack Vulnerability
2009-11-05 19:53:52
slackware
slackware
openssl
2009-11-16 13:42:36
fortinet
fortinet
FortiOS SSL Deep-Inspection possible Insecure Renegotiation
2017-11-03 00:00:00
exploitpack
exploitpack
TLS - Renegotiation
2009-12-21 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-09:15.ssl
2009-12-03 00:00:00
cert
cert
SSL and TLS protocols renegotiation vulnerability
2009-11-11 00:00:00
checkpoint_advisories
checkpoint_advisories
TLS Renegotiation (CVE-2009-3555)
2009-11-22 00:00:00

EPSS

0.012

Percentile

85.6%

JSON
Related for SUSE-SA:2010:020
nessus61redhat4openvas67centos4oraclelinux3osv2securityvulns6nvd2cvelist2ubuntucve1openssl1zdt1debiancve2f52veracode2prion2cve2debian4ubuntu4exploitdb2altlinux2suse1seebug3mozilla1hackerone2fedora8cisco2slackware1fortinet1exploitpack1freebsd_advisory1cert1checkpoint_advisories1