Red Hat Security Advisory

RHSA-2013:0714

stunnel security update

Released 2013-04-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) stunnel-4.29-3.el6_4
Red Hat Enterprise Linux HPC Node Optional (v. 6) stunnel-4.29-3.el6_4
Red Hat Enterprise Linux Server (v. 6) stunnel-4.29-3.el6_4
Red Hat Enterprise Linux Workstation (v. 6) stunnel-4.29-3.el6_4

Fixes 1 record

TI-2013-01549 CVE-2013-1762 · GHSA-997q-cp6v-cm6w

stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are…

LOW 35

stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer conversion, which allows remote proxy servers to execute arbitrary code via a crafted r…

CVSS 2.0MEDIUM 6.6 Network No auth Interaction — EPSS 0.02932 Published 2013-03-08 Fixed CWE-94