Most recent entries from all

bdu:2016-00631

Withdrawn: BELL-CVE-2016-0705 — CVE-2016-0705 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2016-avi-076 — De multiples vulnérabilités ont été corrigées dans OpenSSL. Elles permettent à un attaquant…

certfr-2016-avi-076

cnvd-2016-01437

EUVD-2026-81558

fkie_cve-2016-0705

Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.

GHSA-jq9m-v5x9-ppg9

gsd-2016-0705

ICSA-22-349-21 — Siemens SCALANCE X-200RNA Switch Devices

OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack. sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root login attempt with the correct password, which makes it easier for remote attackers to use timing differences to determine if the password step of a multi-step authentication is successful, a different vulnerability than CVE-2003-0190. The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allows remote DTLS peers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unexpected application data. The dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 before 1.0.2a does not properly isolate the state information of independent data streams, which allows remote attackers to cause a denial of service (application crash) via crafted DTLS traffic, as demonstrated by DTLS 1.0 traffic to a DTLS 1.2 server. The ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c in OpenSSL 1.0.2 before 1.0.2a allows remote…

openSUSE-SU-2024:10200-1 — libmysql56client18-32bit-5.6.34-1.1 on GA media

libmysql56client18-32bit-5.6.34-1.1 on GA media

RHSA-2016:0379 — Red Hat Security Advisory: rhev-hypervisor security, bug fix and enhancement update

OpenSSL: SSLv2 doesn't block disabled ciphers OpenSSL: Side channel attack on modular exponentiation OpenSSL: Double-free in DSA code OpenSSL: BN_hex2bn/BN_dec2bn NULL pointer deref/heap corruption SSL/TLS: Cross-protocol attack on TLS using SSLv2 (DROWN)

SUSE-SU-2016:0617-1 — Security update for openssl

Security update for openssl

UBUNTU-CVE-2016-0705

Affected: Ubuntu:14.04:LTS: openssl, Ubuntu:16.04:LTS: openssl

WID-SEC-W-2023-0427 — OpenSSL: Mehrere Schwachstellen

Ein anonymer, lokaler bzw. entfernter Angreifer kann mehrere Schwachstellen in OpenSSL, Ubuntu Linux, Debian Linux Wheezy (7.0), Debian Linux Jessie (8.0), Red Hat Enterprise Linux HPC Node, Red Hat Enterprise Linux Server EUS, Red Hat Enterprise Linux Workstation, Red Hat Enterprise Linux Server, Red Hat Enterprise Linux Desktop, Red Hat Enterprise Linux Server AUS, Arista EOS und Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen, beliebigen Programcode mit den Rechten des Dienstes auszuführen oder um einen Denial of Service Zustand herbeizuführen.