https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:19:42 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-00652 bdu:2015-00652 https://cve.radiocsirt.org/vuln/bdu:2015-00652 https://cve.radiocsirt.org/vuln/bell-cve-2014-3511 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2014-3511 https://cve.radiocsirt.org/vuln/certfr-2014-avi-344 certfr-2014-avi-344 https://cve.radiocsirt.org/vuln/certfr-2014-avi-344 https://cve.radiocsirt.org/vuln/euvd-2026-99254 EUVD-2026-99254 https://cve.radiocsirt.org/vuln/euvd-2026-99254 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3511 <p>The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a &#34;protocol downgrade&#34; issue.</p> <p>The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a &#34;protocol downgrade&#34; issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-3511 https://cve.radiocsirt.org/vuln/ghsa-xfjr-6mmm-7hc7 <p>The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a &#34;protocol downgrade&#34; issue.</p> <p>The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a &#34;protocol downgrade&#34; issue.</p> https://cve.radiocsirt.org/vuln/ghsa-xfjr-6mmm-7hc7 https://cve.radiocsirt.org/vuln/gsd-2014-3511 gsd-2014-3511 https://cve.radiocsirt.org/vuln/gsd-2014-3511 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10271-1 <p>libopenssl-devel-1.0.2j-2.2 on GA media</p> <p>libopenssl-devel-1.0.2j-2.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10271-1 https://cve.radiocsirt.org/vuln/rhsa-2014:1052 <p>openssl: DTLS packet processing double free openssl: DTLS memory exhaustion openssl: DTLS memory leak from zero-length fragments openssl: information leak in pretty printing functions openssl: race condition in ssl_parse_serverhello_tlsext openssl: DTLS anonymous (EC)DH denial of service openssl: TLS protocol downgrade attack</p> <p>openssl: DTLS packet processing double free openssl: DTLS memory exhaustion openssl: DTLS memory leak from zero-length fragments openssl: information leak in pretty printing functions openssl: race condition in ssl_parse_serverhello_tlsext openssl: DTLS anonymous (EC)DH denial of service openssl: TLS protocol downgrade attack</p> https://cve.radiocsirt.org/vuln/rhsa-2014:1052 https://cve.radiocsirt.org/vuln/suse-ru-2015:0769-1 <p>Security update for openssl1</p> <p>Security update for openssl1</p> https://cve.radiocsirt.org/vuln/suse-ru-2015:0769-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3511 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: openssl</p> <p>The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a &#34;protocol downgrade&#34; issue.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: openssl</p> <p>The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a &#34;protocol downgrade&#34; issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3511 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0498 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um einen Denial of Service Angriff durchzuführen, Informationen offenzulegen und eine Protokoll Downgrade Attacke durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um einen Denial of Service Angriff durchzuführen, Informationen offenzulegen und eine Protokoll Downgrade Attacke durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0498