Red Hat Security AdvisoryRHSA-2014:1692
openssl security update
Released 2014-10-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Storage Server 2.1 openssl-1.0.1e-30.el6_6.2, openssl-devel-1.0.1e-30.el6_6.2, openssl-perl-1.0.1e-30.el6_6.2 +1
Fixes 2 records
Priority MEDIUM 58
Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted handshake message.
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.37072 · Published 2014-10-19 · Partial fix CWE-20
Priority MEDIUM 51
Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted s…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.22747 · Published 2014-10-19 · Fixed CWE-20
