Red Hat Security AdvisoryRHSA-2016:1137
openssl security update
Released 2016-05-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) openssl-0.9.8e-40.el5_11, openssl-0.9.8e-40.el5_11.i386, openssl-0.9.8e-40.el5_11.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) openssl-0.9.8e-40.el5_11, openssl-0.9.8e-40.el5_11.i386, openssl-perl-0.9.8e-40.el5_11 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) openssl-0.9.8e-40.el5_11, openssl-devel-0.9.8e-40.el5_11, openssl-devel-0.9.8e-40.el5_11.i386
Fixes 1 record
Priority HIGH 82
The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via an ANY field in crafte…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.77906 · Published 2016-05-05 · Partial fix CWE-119
