Red Hat Security AdvisoryRHSA-2012:0518
openssl security update
Released 2012-04-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) openssl-0.9.8e-22.el5_8.3, openssl-devel-0.9.8e-22.el5_8.3, openssl-devel-0.9.8e-22.el5_8.3.i386
- Red Hat Enterprise Linux (v. 5 server) openssl-0.9.8e-22.el5_8.3, openssl-0.9.8e-22.el5_8.3.i386, openssl-0.9.8e-22.el5_8.3.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) openssl-0.9.8e-22.el5_8.3, openssl-0.9.8e-22.el5_8.3.i386, openssl-perl-0.9.8e-22.el5_8.3 +3
- Red Hat Enterprise Linux Desktop (v. 6) openssl-1.0.0-20.el6_2.4, openssl098e-0.9.8e-17.el6_2.2
- Red Hat Enterprise Linux Desktop Optional (v. 6) openssl-1.0.0-20.el6_2.4, openssl-devel-1.0.0-20.el6_2.4, openssl-perl-1.0.0-20.el6_2.4 +1
- Red Hat Enterprise Linux HPC Node (v. 6) openssl-1.0.0-20.el6_2.4, openssl098e-0.9.8e-17.el6_2.2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openssl-1.0.0-20.el6_2.4, openssl-devel-1.0.0-20.el6_2.4, openssl-perl-1.0.0-20.el6_2.4 +1
- Red Hat Enterprise Linux Server (v. 6) openssl-1.0.0-20.el6_2.4, openssl-1.0.0-20.el6_2.4.ppc, openssl-devel-1.0.0-20.el6_2.4 +3
- Red Hat Enterprise Linux Server Optional (v. 6) openssl-1.0.0-20.el6_2.4, openssl-perl-1.0.0-20.el6_2.4, openssl-static-1.0.0-20.el6_2.4
- Red Hat Enterprise Linux Workstation (v. 6) openssl-1.0.0-20.el6_2.4, openssl-devel-1.0.0-20.el6_2.4, openssl098e-0.9.8e-17.el6_2.2
- Red Hat Enterprise Linux Workstation Optional (v. 6) openssl-1.0.0-20.el6_2.4, openssl-perl-1.0.0-20.el6_2.4, openssl-static-1.0.0-20.el6_2.4
Fixes 1 record
Priority MEDIUM 63
The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer ov…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.47913 · Published 2012-04-19 · Partial fix CWE-119
