Red Hat Security Advisory 2016-0306-01 - OpenSSL is a toolkit that implements the Secure Sockets Layer and Transport Layer Security protocols, as well as a full-strength, general purpose cryptography library. A padding oracle flaw was found in the Secure Sockets Layer version 2.0 protocol. An attacker can potentially use this flaw to decrypt RSA-encrypted cipher text from a connection using a newer SSL/TLS protocol version, allowing them to decrypt such connections. This cross-protocol attack is publicly referred to as DROWN.
12d8bd2deb212825bc9f9f56e0fa1b109f58f9c894fcecb04e7ee03e38ed646eRed Hat Security Advisory 2016-0305-01 - OpenSSL is a toolkit that implements the Secure Sockets Layer and Transport Layer Security protocols, as well as a full-strength, general purpose cryptography library. A padding oracle flaw was found in the Secure Sockets Layer version 2.0 protocol. An attacker can potentially use this flaw to decrypt RSA-encrypted cipher text from a connection using a newer SSL/TLS protocol version, allowing them to decrypt such connections. This cross-protocol attack is publicly referred to as DROWN.
0952f245c913f0d441f710c0e32f918dac6fc3b44edaff68a2b1b5357255344bRed Hat Security Advisory 2016-0332-01 - An updated version of Red Hat Enterprise Linux Atomic Host is available as an OSTree.
36f700bc832f8e4238050901ffc610838bb1ffbe03abe53f5e15777b2e3be6acRed Hat Security Advisory 2016-0304-01 - OpenSSL is a toolkit that implements the Secure Sockets Layer and Transport Layer Security protocols, as well as a full-strength, general purpose cryptography library. A padding oracle flaw was found in the Secure Sockets Layer version 2.0 protocol. An attacker can potentially use this flaw to decrypt RSA-encrypted cipher text from a connection using a newer SSL/TLS protocol version, allowing them to decrypt such connections. This cross-protocol attack is publicly referred to as DROWN.
947119e9fd5d8f11486ab1908732c47d26541cd1c088d1e31ab0fea8539714b4Red Hat Security Advisory 2016-0303-01 - OpenSSL is a toolkit that implements the Secure Sockets Layer and Transport Layer Security protocols, as well as a full-strength, general purpose cryptography library. A padding oracle flaw was found in the Secure Sockets Layer version 2.0 protocol. An attacker can potentially use this flaw to decrypt RSA-encrypted cipher text from a connection using a newer SSL/TLS protocol version, allowing them to decrypt such connections. This cross-protocol attack is publicly referred to as DROWN.
6c5b44e7561b441a8e824a9fa4d340b6a7a2b33511056e4ef067b57cd2fa096bRed Hat Security Advisory 2016-0302-01 - OpenSSL is a toolkit that implements the Secure Sockets Layer and Transport Layer Security protocols, as well as a full-strength, general purpose cryptography library. A padding oracle flaw was found in the Secure Sockets Layer version 2.0 protocol. An attacker can potentially use this flaw to decrypt RSA-encrypted cipher text from a connection using a newer SSL/TLS protocol version, allowing them to decrypt such connections. This cross-protocol attack is publicly referred to as DROWN.
7f307653c8a35db568106e61a7b17d8070ee4b40d776118f84222053ea23e83cRed Hat Security Advisory 2016-0301-01 - OpenSSL is a toolkit that implements the Secure Sockets Layer and Transport Layer Security protocols, as well as a full-strength, general purpose cryptography library. A padding oracle flaw was found in the Secure Sockets Layer version 2.0 protocol. An attacker can potentially use this flaw to decrypt RSA-encrypted cipher text from a connection using a newer SSL/TLS protocol version, allowing them to decrypt such connections. This cross-protocol attack is publicly referred to as DROWN.
2355a22eadd6bc95f2b7051a23cb14934b794d9459acfd366d78f256e320c291WordPress CP Polls plugin version 1.0.8 suffers from cross site request forgery and cross site scripting vulnerabilities.
8357ac1b88e48568e0b75ab46fc3e37b7f7e2fde665a9af49dcfbd05f7f0ab9cDebian Linux Security Advisory 3501-1 - Stephane Chazelas discovered a bug in the environment handling in Perl. Perl provides a Perl-space hash variable, %ENV, in which environment variables can be looked up. If a variable appears twice in envp, only the last value would appear in %ENV, but getenv would return the first. Perl's taint security mechanism would be applied to the value in %ENV, but not to the other rest of the environment. This could result in an ambiguous environment causing environment variables to be propagated to subprocesses, despite the protections supposedly offered by taint checking.
0175db23b2e5d2977586b5d7e9b15cec7d810fb7dd51a574de92d242a41c5aa4Ubuntu Security Notice 2914-1 - Yuval Yarom, Daniel Genkin, and Nadia Heninger discovered that OpenSSL was vulnerable to a side-channel attack on modular exponentiation. On certain CPUs, a local attacker could possibly use this issue to recover RSA keys. This flaw is known as CacheBleed. Adam Langley discovered that OpenSSL incorrectly handled memory when parsing DSA private keys. A remote attacker could use this issue to cause OpenSSL to crash, resulting in a denial of service, or possibly execute arbitrary code. Various other issues were also addressed.
b41695e06cd41d2e76d57c53c67028225e7af5f7b366b2f6f536e19119d0ae4bPutty version 0.66 suffers from a DLL hijacking vulnerability.
6ecc050cc5542e802afc59207ebcccd15ab0c528cfed7516506202381da1151dDebian Linux Security Advisory 3500-1 - Several vulnerabilities were discovered in OpenSSL, a Secure Socket Layer toolkit.
3f9c70f25ffb5429b54fefdf73340747e4caeeb652fd96453dd3848535c499dbWordPress CP Polls plugin version 1.0.8 suffers from a persistent cross site scripting vulnerability via file upload.
d0f470351ed56ed98b3366f515a352e352454d550d37a38d55acee54f832d7aaVivint Sky Control Panel suffers from an unauthenticated access vulnerability.
e1f9494a5c77b087852df015cc3efc94eb926402bd77c5224564a7302e61af4aWordPress CP Polls plugin version 1.0.8 suffers from a cross site request forgery vulnerability that can be leveraged to turn a file download into a malicious .bat file.
d8a74ea935cf5527d08c2a6c2e256129ed3fa98c0b377e27197ba096ef05423f
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed