Red Hat Security AdvisoryRHSA-2006:0695
openssl security update
Released 2006-09-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 openssl-0.9.7a-33.21, openssl-0.9.7a-33.21.i386, openssl-devel-0.9.7a-33.21 +5
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 openssl-0.9.6b-46, openssl-0.9.6b-46.i386, openssl-0.9.6b-46.ia64 +10
- Red Hat Enterprise Linux AS version 3 openssl-0.9.7a-33.21, openssl-0.9.7a-33.21.i386, openssl-0.9.7a-33.21.ia64 +13
- Red Hat Enterprise Linux AS version 4 openssl-0.9.7a-43.14, openssl-0.9.7a-43.14.i386, openssl-0.9.7a-43.14.ia64 +13
- Red Hat Enterprise Linux Desktop version 4 openssl-0.9.7a-43.14, openssl-0.9.7a-43.14.i386, openssl-devel-0.9.7a-43.14 +5
- Red Hat Enterprise Linux ES version 2.1 openssl-0.9.6b-46, openssl-0.9.6b-46.i386, openssl-devel-0.9.6b-46.i386 +1
- Red Hat Enterprise Linux ES version 3 openssl-0.9.7a-33.21, openssl-0.9.7a-33.21.i386, openssl-0.9.7a-33.21.ia64 +9
- Red Hat Enterprise Linux ES version 4 openssl-0.9.7a-43.14, openssl-0.9.7a-43.14.i386, openssl-0.9.7a-43.14.ia64 +9
- Red Hat Enterprise Linux WS version 2.1 openssl-0.9.6b-46, openssl-0.9.6b-46.i386, openssl-devel-0.9.6b-46.i386 +1
- Red Hat Enterprise Linux WS version 3 openssl-0.9.7a-33.21, openssl-0.9.7a-33.21.i386, openssl-0.9.7a-33.21.ia64 +9
- Red Hat Enterprise Linux WS version 4 openssl-0.9.7a-43.14, openssl-0.9.7a-43.14.i386, openssl-0.9.7a-43.14.ia64 +9
- Red Hat Linux Advanced Workstation 2.1 openssl-0.9.6b-46, openssl-0.9.6b-46.ia64, openssl-devel-0.9.6b-46.ia64 +5
Fixes 4 records
Priority HIGH 74
Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.49909 · Published 2006-09-28 · Fixed CWE-119
Priority MEDIUM 47
OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error cond…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.11042 · Published 2006-09-28 · Fixed CWE-399
Priority MEDIUM 42
OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" va…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.05097 · Published 2006-09-28 · Fixed CWE-399
Priority LOW 38
The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.19405 · Published 2006-09-28 · Fixed CWE-476
THREATIST.IORead the docs