Red Hat Security AdvisoryRHSA-2007:0813
openssl security update
Released 2007-10-22 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 openssl-0.9.7a-33.24, openssl-0.9.7a-33.24.i386, openssl-devel-0.9.7a-33.24 +3
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 openssl-0.9.6b-48, openssl-0.9.6b-48.i386, openssl-0.9.6b-48.ia64 +4
- Red Hat Enterprise Linux AS version 3 openssl-0.9.7a-33.24, openssl-0.9.7a-33.24.i386, openssl-0.9.7a-33.24.ia64 +9
- Red Hat Enterprise Linux ES version 2.1 openssl-0.9.6b-48, openssl-0.9.6b-48.i386, openssl-devel-0.9.6b-48.i386 +1
- Red Hat Enterprise Linux ES version 3 openssl-0.9.7a-33.24, openssl-0.9.7a-33.24.i386, openssl-0.9.7a-33.24.ia64 +6
- Red Hat Enterprise Linux WS version 2.1 openssl-0.9.6b-48, openssl-0.9.6b-48.i386, openssl-devel-0.9.6b-48.i386 +1
- Red Hat Enterprise Linux WS version 3 openssl-0.9.7a-33.24, openssl-0.9.7a-33.24.i386, openssl-0.9.7a-33.24.ia64 +6
- Red Hat Linux Advanced Workstation 2.1 openssl-0.9.6b-48, openssl-0.9.6b-48.ia64, openssl-devel-0.9.6b-48.ia64 +1
Fixes 2 records
Priority MEDIUM 46
Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer u…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.16061 · Published 2007-09-27 · Fixed CWE-189
Priority LOW 8
The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA pr…
CVSS 2.0LOW 1.2· Local · No auth · Interaction — · EPSS 0.00404 · Published 2007-08-08 · Fixed
