Red Hat Security AdvisoryRHSA-2012:0522
openssl security update
Released 2012-04-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS (v. 3 ELS) openssl-0.9.7a-33.28, openssl-0.9.7a-33.28.i386, openssl-devel-0.9.7a-33.28.i386 +1
- Red Hat Enterprise Linux AS (v. 4 ELS) openssl-0.9.7a-43.20.el4, openssl-0.9.7a-43.20.el4.i386, openssl-0.9.7a-43.20.el4.ia64 +6
- Red Hat Enterprise Linux ES (v. 3 ELS) openssl-0.9.7a-33.28, openssl-0.9.7a-33.28.i386, openssl-devel-0.9.7a-33.28.i386 +1
- Red Hat Enterprise Linux ES (v. 4 ELS) openssl-0.9.7a-43.20.el4, openssl-0.9.7a-43.20.el4.i386, openssl-devel-0.9.7a-43.20.el4 +3
- Red Hat Enterprise Linux EUS (v. 5.6 server) openssl-0.9.8e-12.el5_6.9, openssl-0.9.8e-12.el5_6.9.i386, openssl-0.9.8e-12.el5_6.9.ia64 +9
- Red Hat Enterprise Linux Long Life (v. 5.3 server) openssl-0.9.8e-7.el5_3.2, openssl-0.9.8e-7.el5_3.2.i386, openssl-0.9.8e-7.el5_3.2.ia64 +6
- Red Hat Enterprise Linux Server EUS (v. 6.0) openssl-1.0.0-4.el6_0.3, openssl-1.0.0-4.el6_0.3.ppc, openssl-devel-1.0.0-4.el6_0.3 +1
- Red Hat Enterprise Linux Server EUS (v. 6.1) openssl-1.0.0-10.el6_1.6, openssl-1.0.0-10.el6_1.6.ppc, openssl-devel-1.0.0-10.el6_1.6 +1
- Red Hat Enterprise Linux Server Optional EUS (v. 6.0) openssl-1.0.0-4.el6_0.3, openssl-perl-1.0.0-4.el6_0.3, openssl-static-1.0.0-4.el6_0.3
- Red Hat Enterprise Linux Server Optional EUS (v. 6.1) openssl-1.0.0-10.el6_1.6, openssl-perl-1.0.0-10.el6_1.6, openssl-static-1.0.0-10.el6_1.6
Fixes 1 record
Priority MEDIUM 63
The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer ov…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.47913 · Published 2012-04-19 · Partial fix CWE-119
