Red Hat Security AdvisoryRHSA-2012:0699
openssl security and bug fix update
Released 2012-05-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) openssl-0.9.8e-22.el5_8.4, openssl-devel-0.9.8e-22.el5_8.4, openssl-devel-0.9.8e-22.el5_8.4.i386
- Red Hat Enterprise Linux (v. 5 server) openssl-0.9.8e-22.el5_8.4, openssl-0.9.8e-22.el5_8.4.i386, openssl-0.9.8e-22.el5_8.4.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) openssl-0.9.8e-22.el5_8.4, openssl-0.9.8e-22.el5_8.4.i386, openssl-perl-0.9.8e-22.el5_8.4 +1
- Red Hat Enterprise Linux Desktop (v. 6) openssl-1.0.0-20.el6_2.5
- Red Hat Enterprise Linux Desktop Optional (v. 6) openssl-1.0.0-20.el6_2.5, openssl-devel-1.0.0-20.el6_2.5, openssl-perl-1.0.0-20.el6_2.5 +1
- Red Hat Enterprise Linux HPC Node (v. 6) openssl-1.0.0-20.el6_2.5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openssl-1.0.0-20.el6_2.5, openssl-devel-1.0.0-20.el6_2.5, openssl-perl-1.0.0-20.el6_2.5 +1
- Red Hat Enterprise Linux Server (v. 6) openssl-1.0.0-20.el6_2.5, openssl-1.0.0-20.el6_2.5.ppc, openssl-devel-1.0.0-20.el6_2.5 +1
- Red Hat Enterprise Linux Server Optional (v. 6) openssl-1.0.0-20.el6_2.5, openssl-perl-1.0.0-20.el6_2.5, openssl-static-1.0.0-20.el6_2.5
- Red Hat Enterprise Linux Workstation (v. 6) openssl-1.0.0-20.el6_2.5, openssl-devel-1.0.0-20.el6_2.5
- Red Hat Enterprise Linux Workstation Optional (v. 6) openssl-1.0.0-20.el6_2.5, openssl-perl-1.0.0-20.el6_2.5, openssl-static-1.0.0-20.el6_2.5
Fixes 1 record
Priority MEDIUM 53
Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.27871 · Published 2012-05-14 · Partial fix CWE-189
