[Forgot Password]
Login  Register Subscribe

23631

 
 

115084

 
 

97147

 
 

909

 
 

78730

 
 

109

Paid content will be excluded from the download.


Download | Alert*
OVAL

ELSA-2016-1137 -- Oracle openssl

ID: oval:org.secpod.oval:def:1501483Date: (C)2016-06-06   (M)2017-11-10
Class: PATCHFamily: unix




OpenSSL is a toolkit that implements the Secure Sockets Layer and Transport Layer Security protocols, as well as a full-strength general-purpose cryptography library. Security Fix: * A flaw was found in the way OpenSSL encoded certain ASN.1 data structures. An attacker could use this flaw to create a specially crafted certificate which, when verified or re-encoded by OpenSSL, could cause it to crash, or execute arbitrary code using the permissions of the user running an application compiled against the OpenSSL library. Red Hat would like to thank the OpenSSL project for reporting this issue. Upstream acknowledges Huzaifa Sidhpurwala , Hanno Bock, and David Benjamin as the original reporters.

Platform:
Oracle Linux 5
Product:
openssl
Reference:
ELSA-2016-1137
CVE-2014-3570
CVE-2014-3571
CVE-2014-3572
CVE-2016-2108
CVE    4
CVE-2016-2108
CVE-2014-3572
CVE-2014-3570
CVE-2014-3571
...
CPE    64
cpe:/a:openssl:openssl:1.0.0n
cpe:/a:openssl:openssl:1.0.0m
cpe:/a:openssl:openssl:1.0.0o
cpe:/a:openssl:openssl:1.0.2a
...

© 2013 SecPod Technologies