Red Hat Security AdvisoryRHSA-2010:0162
openssl security update
Released 2010-03-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) openssl-0.9.8e-12.el5_4.6, openssl-0.9.8e-12.el5_4.6.i386, openssl-0.9.8e-12.el5_4.6.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) openssl-0.9.8e-12.el5_4.6, openssl-0.9.8e-12.el5_4.6.i386, openssl-perl-0.9.8e-12.el5_4.6 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) openssl-0.9.8e-12.el5_4.6, openssl-devel-0.9.8e-12.el5_4.6, openssl-devel-0.9.8e-12.el5_4.6.i386
Fixes 3 records
Priority CRITICAL 91
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.87264 · Published 2009-11-09 · Fixed in 7.0.10, 6.0.32 +1 CWE-300
Priority MEDIUM 52
OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified i…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05779 · Published 2010-03-05 · Fixed CWE-20
Priority LOW 31
The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote attacke…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.07857 · Published 2010-03-05 · Fixed CWE-20
THREATIST.IORead the docs