Red Hat Security AdvisoryRHSA-2014:0680
openssl098e security update
Released 2014-06-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) openssl098e-0.9.8e-29.el7_0.2
- Red Hat Enterprise Linux ComputeNode (v. 7) openssl098e-0.9.8e-29.el7_0.2
- Red Hat Enterprise Linux Server (v. 7) openssl098e-0.9.8e-29.el7_0.2, openssl098e-0.9.8e-29.el7_0.2.ppc
- Red Hat Enterprise Linux Workstation (v. 7) openssl098e-0.9.8e-29.el7_0.2
Fixes 1 record
Priority HIGH 76
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key…
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.95326 · Published 2014-06-05 · Partial fix CWE-326
