Red Hat Security AdvisoryRHSA-2007:1003
openssl security and bug fix update
Released 2007-11-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 openssl-0.9.7a-43.17.el4_6.1, openssl-0.9.7a-43.17.el4_6.1.i386, openssl-0.9.7a-43.17.el4_6.1.ia64 +9
- Red Hat Enterprise Linux Desktop version 4 openssl-0.9.7a-43.17.el4_6.1, openssl-0.9.7a-43.17.el4_6.1.i386, openssl-devel-0.9.7a-43.17.el4_6.1 +3
- Red Hat Enterprise Linux ES version 4 openssl-0.9.7a-43.17.el4_6.1, openssl-0.9.7a-43.17.el4_6.1.i386, openssl-0.9.7a-43.17.el4_6.1.ia64 +6
- Red Hat Enterprise Linux WS version 4 openssl-0.9.7a-43.17.el4_6.1, openssl-0.9.7a-43.17.el4_6.1.i386, openssl-0.9.7a-43.17.el4_6.1.ia64 +6
Fixes 2 records
Priority MEDIUM 46
Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer u…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.16061 · Published 2007-09-27 · Fixed CWE-189
Priority LOW 8
The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA pr…
CVSS 2.0LOW 1.2· Local · No auth · Interaction — · EPSS 0.00404 · Published 2007-08-08 · Fixed
