[Forgot Password]
Login  Register Subscribe

24436

 
 

131815

 
 

116471

 
 

909

 
 

91176

 
 

140

Paid content will be excluded from the download.


Download | Alert*
OVAL

CESA-2016:1137 -- centos 5 openssl

ID: oval:org.secpod.oval:def:203943Date: (C)2016-06-02   (M)2018-06-17
Class: PATCHFamily: unix




OpenSSL is a toolkit that implements the Secure Sockets Layer and Transport Layer Security protocols, as well as a full-strength general-purpose cryptography library. Security Fix: * A flaw was found in the way OpenSSL encoded certain ASN.1 data structures. An attacker could use this flaw to create a specially crafted certificate which, when verified or re-encoded by OpenSSL, could cause it to crash, or execute arbitrary code using the permissions of the user running an application compiled against the OpenSSL library. Red Hat would like to thank the OpenSSL project for reporting this issue. Upstream acknowledges Huzaifa Sidhpurwala , Hanno Bock, and David Benjamin as the original reporters.

Platform:
CentOS 5
Product:
openssl
Reference:
CESA-2016:1137
CVE-2016-2108
CVE    1
CVE-2016-2108
CPE    9
cpe:/o:centos:centos:5
cpe:/a:openssl:openssl:1.0.1n
cpe:/a:openssl:openssl:1.0.2
cpe:/a:openssl:openssl:1.0.2:beta3
...

© SecPod Technologies