Red Hat Security AdvisoryRHSA-2007:0964
openssl security update
Released 2007-10-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) openssl-0.9.8b-8.3.el5_0.2, openssl-0.9.8b-8.3.el5_0.2.i386, openssl-0.9.8b-8.3.el5_0.2.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) openssl-0.9.8b-8.3.el5_0.2, openssl-0.9.8b-8.3.el5_0.2.i386, openssl-perl-0.9.8b-8.3.el5_0.2 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) openssl-0.9.8b-8.3.el5_0.2, openssl-devel-0.9.8b-8.3.el5_0.2, openssl-devel-0.9.8b-8.3.el5_0.2.i386
Fixes 3 records
Priority MEDIUM 53
Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.10512 · Published 2007-10-13 · Fixed CWE-189
Priority MEDIUM 46
Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer u…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.16061 · Published 2007-09-27 · Fixed CWE-189
Priority LOW 8
The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA pr…
CVSS 2.0LOW 1.2· Local · No auth · Interaction — · EPSS 0.00404 · Published 2007-08-08 · Fixed
THREATIST.IORead the docs