Red Hat Security AdvisoryRHSA-2012:0086
openssl security update
Released 2012-02-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 openssl-0.9.7a-43.18.el4, openssl-0.9.7a-43.18.el4.i386, openssl-0.9.7a-43.18.el4.ia64 +9
- Red Hat Enterprise Linux Desktop version 4 openssl-0.9.7a-43.18.el4, openssl-0.9.7a-43.18.el4.i386, openssl-devel-0.9.7a-43.18.el4 +3
- Red Hat Enterprise Linux ES version 4 openssl-0.9.7a-43.18.el4, openssl-0.9.7a-43.18.el4.i386, openssl-0.9.7a-43.18.el4.ia64 +6
- Red Hat Enterprise Linux WS version 4 openssl-0.9.7a-43.18.el4, openssl-0.9.7a-43.18.el4.i386, openssl-0.9.7a-43.18.el4.ia64 +6
Fixes 2 records
Priority MEDIUM 40
The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption)…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.17839 · Published 2012-01-06 · Partial fix CWE-399
Priority LOW 39
The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decry…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.15575 · Published 2012-01-06 · Partial fix CWE-310
