Red Hat Security AdvisoryRHSA-2010:0440
rhev-hypervisor security and bug fix update
Released 2010-05-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Virtualization Hypervisor 5 rhev-hypervisor-5.4-2.1.12.1.el5_4rhev2_1, rhev-hypervisor-pxe-5.4-2.1.12.1.el5_4rhev2_1
Fixes 2 records
Priority CRITICAL 91
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.87264 · Published 2009-11-09 · Fixed in 7.0.10, 6.0.32 +1 CWE-300
Priority MEDIUM 52
OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified i…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05779 · Published 2010-03-05 · Fixed CWE-20
