Red Hat Security AdvisoryRHSA-2013:0782
openssl security update
Released 2013-05-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Web Platform 5.2
Fixes 2 records
Priority MEDIUM 41
OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer derefer…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.1965 · Published 2013-02-08 · Partial fix CWE-310
Priority LOW 39
The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the proces…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.35584 · Published 2013-02-08 · Partial fix CWE-310
