Information Leakage

🗓️ 15 Jan 2019 08:58:53Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 27 Views

OpenSSL vulnerability in TLS/SSL protoco

Reporter	Title	Published	Views	Family All 176
IBM Security Bulletins	Security Bulletin: SONAS Update Includes Fixes for Multiple Vendor Security Vulnerabilities	26 Sep 202204:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerability in OpenSSL (CVE-2012-4929)	3 Mar 202019:02	–	ibm
IBM Security Bulletins	Security Bulletin: Storwize V7000 Unified Update Includes Fixes for Multiple Vendor Security Vulnerabilities	26 Sep 202204:23	–	ibm
Tenable Nessus	Mac OS X 10.8 < 10.8.4 Multiple Vulnerabilities (Security Update 2013-002)	5 Jun 201300:00	–	nessus
Tenable Nessus	Mac OS X 10.8 < 10.8.4 Multiple Vulnerabilities (Security Update 2013-002)	5 Jun 201300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : openssl (ALAS-2013-171)	4 Sep 201300:00	–	nessus
Tenable Nessus	CentOS 5 / 6 : openssl (CESA-2013:0587)	7 Mar 201300:00	–	nessus
Tenable Nessus	Debian DLA-400-1 : pound security update (BEAST) (POODLE)	25 Jan 201600:00	–	nessus
Tenable Nessus	Debian DSA-2579-1 : apache2 - Multiple issues	2 Dec 201200:00	–	nessus
Tenable Nessus	Debian DSA-2626-1 : lighttpd - several issues	18 Feb 201300:00	–	nessus

Vulners

Node

openssl opensslMatch1.0.0_10.el6

OR

openssl opensslMatch0.9.8e_20.el5_7.1

OR

openssl opensslMatch0.9.8e_20.el5

OR

openssl opensslMatch0.9.8e_12.el5

OR

openssl opensslMatch0.9.8b_8.3.el5

OR

openssl opensslMatch1.0.0_20.el6_2.1

OR

openssl opensslMatch0.9.8e_22.el5_8.1

OR

openssl opensslMatch0.9.8e_22.el5

OR

openssl opensslMatch0.9.8e_12.el5_5.7

OR

openssl opensslMatch0.9.8e_12.el5_4.1

OR

openssl opensslMatch1.0.0_4.el6_0.2

OR

openssl opensslMatch0.9.8b_10.el5_2.1

OR

openssl opensslMatch0.9.8b_10.el5

OR

openssl opensslMatch0.9.8e_22.el5_8.4

OR

openssl opensslMatch0.9.8e_7.el5

OR

openssl opensslMatch1.0.0_4.el6

OR

openssl opensslMatch0.9.8b_8.3.el5_0.2

OR

openssl opensslMatch1.0.0_20.el6_2.5

OR

openssl opensslMatch1.0.0_10.el6_1.5

OR

openssl opensslMatch1.0.0_25.el6_3.1

OR

openssl opensslMatch1.0.0_4.el6_0.1

OR

openssl opensslMatch1.0.0_20.el6_2.2

OR

openssl opensslMatch0.9.8e_22.el5_8.3

OR

openssl opensslMatch1.0.0_20.el6

OR

openssl opensslMatch0.9.8e_12.el5_4.6

OR

openssl opensslMatch1.0.0_10.el6_1.4

OR

openssl opensslMatch1.0.0_20.el6_2.4

OR

openssl opensslMatch1.0.0_20.el6_2.3

Source	Link
securityfocus	www.securityfocus.com/bid/55704
lists	www.lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
rhn	www.rhn.redhat.com/errata/RHSA-2013-0587.html
access	www.access.redhat.com/security/updates/classification/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
debian	www.debian.org/security/2012/dsa-2579
debian	www.debian.org/security/2013/dsa-2627
debian	www.debian.org/security/2015/dsa-3253
lists	www.lists.fedoraproject.org/pipermail/package-announce/2013-April/101366.html
arstechnica	www.arstechnica.com/security/2012/09/crime-hijacks-https-sessions/

15 May 2019 06:18Current

4.9Medium risk

Vulners AI Score4.9

CVSS 22.6

EPSS0.04266

openssl vulnerability tls/ssl information leakage compression brute force attack