[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

252271

 
 

909

 
 

196835

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS-2016-714 ---- mod24_nss

ID: oval:org.secpod.oval:def:1600417Date: (C)2016-06-24   (M)2023-02-20
Class: PATCHFamily: unix




It was reported that +CIPHER operator in OpenSSL changes the order of a cipher. Instead of returning an error , it returned the result of processing up to that point, which could result in requested ciphers not being enabled.

Platform:
Amazon Linux AMI
Product:
mod24_nss
Reference:
ALAS-2016-714
CVE-2016-3099
CVE    1
CVE-2016-3099
CPE    2
cpe:/o:amazon:linux
cpe:/a:mod24_nss:mod24_nss

© SecPod Technologies