[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

RHSA-2016:1137-01 -- Redhat openssl

ID: oval:org.secpod.oval:def:501829Date: (C)2016-06-06   (M)2024-02-19
Class: PATCHFamily: unix




OpenSSL is a toolkit that implements the Secure Sockets Layer and Transport Layer Security protocols, as well as a full-strength general-purpose cryptography library. Security Fix: * A flaw was found in the way OpenSSL encoded certain ASN.1 data structures. An attacker could use this flaw to create a specially crafted certificate which, when verified or re-encoded by OpenSSL, could cause it to crash, or execute arbitrary code using the permissions of the user running an application compiled against the OpenSSL library. Red Hat would like to thank the OpenSSL project for reporting this issue. Upstream acknowledges Huzaifa Sidhpurwala , Hanno Bock, and David Benjamin as the original reporters.

Platform:
Red Hat Enterprise Linux 5
Product:
openssl
Reference:
RHSA-2016:1137-01
CVE-2016-2108
CVE    1
CVE-2016-2108
CPE    9
cpe:/o:redhat:enterprise_linux:5
cpe:/a:openssl:openssl:1.0.2
cpe:/a:openssl:openssl:1.0.2:beta3
cpe:/a:openssl:openssl:1.0.2:beta1
...

© SecPod Technologies