Red Hat Security AdvisoryRHSA-2014:0376
openssl security update
Released 2014-04-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) openssl-1.0.1e-16.el6_5.7
- Red Hat Enterprise Linux Desktop Optional (v. 6) openssl-1.0.1e-16.el6_5.7, openssl-devel-1.0.1e-16.el6_5.7, openssl-perl-1.0.1e-16.el6_5.7 +1
- Red Hat Enterprise Linux HPC Node (v. 6) openssl-1.0.1e-16.el6_5.7
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openssl-1.0.1e-16.el6_5.7, openssl-devel-1.0.1e-16.el6_5.7, openssl-perl-1.0.1e-16.el6_5.7 +1
- Red Hat Enterprise Linux Server (v. 6) openssl-1.0.1e-16.el6_5.7, openssl-1.0.1e-16.el6_5.7.ppc, openssl-devel-1.0.1e-16.el6_5.7 +1
- Red Hat Enterprise Linux Server Optional (v. 6) openssl-1.0.1e-16.el6_5.7, openssl-perl-1.0.1e-16.el6_5.7, openssl-static-1.0.1e-16.el6_5.7
- Red Hat Enterprise Linux Workstation (v. 6) openssl-1.0.1e-16.el6_5.7, openssl-devel-1.0.1e-16.el6_5.7
- Red Hat Enterprise Linux Workstation Optional (v. 6) openssl-1.0.1e-16.el6_5.7, openssl-perl-1.0.1e-16.el6_5.7, openssl-static-1.0.1e-16.el6_5.7
Fixes 1 record
Priority CRITICAL 90KEV
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted pa…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.99999 · Published 2014-04-07 · Fixed CWE-125
